
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
react-native-simple-updater
Advanced tools
A lightweight and customizable React Native update checker for Android apps. Supports automatic version checking, APK downloading, and installing — with support for Android 13+ install permissions and MMKV caching to prevent repeated downloads.
A lightweight and customizable React Native update checker for Android apps. Supports automatic version checking, APK downloading, and installing — with support for Android 13+ install permissions and MMKV caching to prevent repeated downloads.
Install the library and required dependencies:
yarn add react-native-simple-updater
yarn add react-native-mmkv react-native-device-info react-native-fs rn-fetch-blob axios
Also, ensure these are properly linked (if using older React Native versions).
Your updateUrl must return a JSON response structured like:
{
"data": {
"version": "1.0.5",
"apkSignedUrl": "https://cdn.yourdomain.com/releases/app-release.apk"
}
}
updateUrl) for version info.version from the response with the current app version using react-native-device-info.autoDownload: true)autoDownload: false)import { UpdateChecker } from 'react-native-simple-updater';
export default function App() {
return (
<>
<UpdateChecker
updateUrl="https://api.yourserver.com/apps/myapp/latest"
autoCheck={true}
autoDownload={false}
/>
<MainApp />
</>
);
}
<UpdateChecker
updateUrl="https://api.yourserver.com/apps/myapp/latest"
autoCheck={true}
autoDownload={true}
/>
| Prop | Type | Default | Description |
|---|---|---|---|
updateUrl | string | — | Required. URL that returns latest version and APK URL. |
autoCheck | boolean | true | Automatically check for updates when component mounts. |
Use the internal hook if you want full control:
import { useUpdateChecker } from 'react-native-simple-updater';
const {
updateAvailable,
progress,
installPending,
triggerUpdate,
triggerInstall,
} = useUpdateChecker({
updateUrl: 'https://your-server.com/apps/latest',
autoCheck: true,
autoDownload: false,
});
For Android 13+, installation of APKs requires runtime permission for unknown sources.
Ensure this is added to your AndroidManifest.xml:
<uses-permission android:name="android.permission.REQUEST_INSTALL_PACKAGES" />
The library automatically prompts the user if the permission is missing.
react-native-simple-updater/
├── src/
│ ├── useUpdateChecker.js # Hook logic
│ └── UpdatePrompt.js # UI wrapper
├── index.js
└── README.md
MMKV to persist the last downloaded version and avoid re-downloading on every boot.installPending will be true if the user didn’t install the last downloaded APK.MIT © 2025
❌ No. Android does not allow silent APK installs unless the app is a system app. This library prompts the user using the system installer.
✅ Yes. iOS support is not included. You may redirect iOS users to the App Store manually.
Want to improve this library?
For questions or suggestions, open an issue or contact Mushud on GitHub.
FAQs
A lightweight and customizable React Native update checker for Android apps. Supports automatic version checking, APK downloading, and installing — with support for Android 13+ install permissions and MMKV caching to prevent repeated downloads.
We found that react-native-simple-updater demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.