
Security News
The Next Open Source Security Race: Triage at Machine Speed
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.
react-native-iap
Advanced tools
React Native IAP is a high-performance in-app purchase library using Nitro Modules that conforms to the Open IAP specification. It provides a unified API for handling in-app purchases across iOS and Android platforms with comprehensive error handling and modern TypeScript support.
Compile-time CSS-in-JS for React Native
β¨ Banishing runtime overhead, one style at a time with kstyled - fully type-safe styling that compiles away.
π Explore kstyled β
π Visit our comprehensive documentation site β
Starting from version 14.0.0, this library uses Nitro Modules for high-performance native bridge implementation. You must install react-native-nitro-modules alongside react-native-iap.
react-native-iap@14.x (Nitro) requires React Native 0.79+.npm i react-native-iap@13.1.0.AnyMap.swift with cppPart.pointee.*)? Temporarily pin Swift to 5.10 for the NitroModules pod (see Installation docs) or upgrade RN and Nitro deps.react-native-nitro-modules/nitro-codegen, then pod install and clean build.More details and the Podfile snippet are in the docs: https://hyochan.github.io/react-native-iap/docs/installation#ios
useIAPnpm install react-native-iap react-native-nitro-modules
# or
yarn add react-native-iap react-native-nitro-modules
π See the complete installation guide and quick start tutorial β
React Native IAP is built with a modern architecture that emphasizes:
| Platform | Support | Notes |
|---|---|---|
| iOS | β | StoreKit 2 (requires iOS 15+) |
| Android | β | Google Play Billing v8.0.0+ |
| Expo Go | β | Not supported (requires native modules) |
| Expo Dev Client | β | Full support |
| Bare React Native | β | Full support |
Before installing React Native IAP, make sure you have:
Kotlin Version Requirement: This library requires Kotlin 2.0+. Configure your project's Kotlin version:
In your root android/build.gradle:
buildscript {
ext {
kotlinVersion = "2.1.20"
}
dependencies {
classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:$kotlinVersion"
}
}
Install pods:
cd ios && pod install
Add StoreKit capability to your iOS app in Xcode:
For Expo projects, add the plugin to your app.json or expo.json:
{
"expo": {
"plugins": [
"react-native-iap",
[
"expo-build-properties",
{
"android": {
"kotlinVersion": "2.2.0"
}
}
]
]
}
}
Note: Expo projects require development build (dev-client) as this library contains native code.
React Native IAP is OpenIAP compliant. For detailed store configuration:
React Native IAP provides AI-friendly documentation for Cursor, GitHub Copilot, Claude, and ChatGPT.
Quick links:
π Visit our comprehensive documentation site β
πΌ View Our Sponsors
Angel
Support this project by becoming a sponsor. Your logo will show up here with a link to your website. Buy me a coffee.
We also manage sponsorships through OpenCollective, which operates separately from our main sponsor program.
Become a sponsor | Become a backer
See our Contributing Guide for development setup and guidelines.
FAQs
React Native In-App Purchases module for iOS and Android using Nitro
The npm package react-native-iap receives a total of 56,251 weekly downloads. As such, react-native-iap popularity was classified as popular.
We found that react-native-iap demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.