code-push-cli

library3.0.0jsnpmunverified

CodePush CLI was a command-line interface designed for the CodePush cloud service, enabling Cordova and React Native developers to deploy mobile app updates directly to user devices. It facilitated over-the-air updates for JavaScript, HTML, CSS, and images, allowing for rapid bug fixes and minor feature additions without requiring new app store submissions. While the last version observed is v4.2.3, which primarily included vulnerability fixes, `code-push-cli` is officially deprecated and no longer supported. Users are strongly advised to migrate to `AppCenter-CLI` or other modern alternatives like `NextPush`, `DeployPulse`, or `Stallion` for continued service and support. Its original key differentiator was enabling swift iteration and a direct engagement model for hybrid app developers.

devops aws

github ↗package ↗homepage ↗

Install & Compatibility

Where this runs

tested against v? · npm install

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

node 18–226 runs

build_error

glibc

node 18–226 runs

build_error

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

This package is a global command-line interface. It is not designed for programmatic import or usage within a Node.js application via `require` or `import` statements. Its functionality is accessed directly through shell commands after global installation.

npm install -g code-push-cli # Then use 'code-push <command>' in your terminal

This is a common subcommand pattern used for releasing React Native updates. It's invoked via the main `code-push` command in the terminal, not through programmatic imports. The command handles bundling and uploading.

code-push release-react MyAppName <platform> --target-binary-version "1.0.0" --output-dir ./build

This subcommand is used for registering new applications with the CodePush service via the command line. Each platform (iOS/Android) typically requires a separate application registration.

code-push app add MyAppName-iOS ios react-native code-push app add MyAppName-Android android react-native

Demonstrates the global installation of the CodePush CLI, account registration, adding applications, and performing a basic React Native release to a staging environment, highlighting its deprecated status.

npm install -g code-push-cli # 1. Register/Login to your CodePush account (opens browser for authentication) code-push register # 2. Add an application (e.g., for iOS and Android) code-push app add MyAwesomeApp-iOS ios react-native code-push app add MyAwesomeApp-Android android react-native # 3. List your registered apps to verify code-push app list # 4. Release an update for a React Native iOS app to the 'Staging' deployment # Note: Replace 'MyAwesomeApp-iOS' with your app name and '1.0.0' with your target binary version code-push release-react MyAwesomeApp-iOS ios --target-binary-version "1.0.0" --description "Initial staging release" --mandatory true # IMPORTANT: This CLI is deprecated. Consider migrating to AppCenter CLI or alternatives: # npm install -g appcenter-cli # appcenter login # appcenter codepush release-react -a YourOrg/YourApp -d Staging

code-push --version

Debug

Known footguns

breakingThe `code-push-cli` package is officially deprecated and no longer supported by Microsoft. Users should migrate to `AppCenter-CLI` or community-driven alternatives for equivalent functionality, active maintenance, and continued support.

gotchaMultiple security vulnerabilities (e.g., `vm2`, `ip`, `cookiejar`, `superagent-proxy`) have been identified and patched across various versions. While recent v4.x releases address many of these, using older, unpatched versions can expose development environments to risks.

gotchaThe CodePush service, particularly its backend provided by Microsoft App Center, was retired in March 2025. Even if the CLI is installed, the underlying service it connects to may no longer be operational, or its functionality severely limited.

Upgrade

Version history

Breaking-change detection hasn't run for this library yet.

Audit

Security & dependencies

CVE tracking and dependency tree are planned for a later release.

Agent activity

20 hits · last 30 days

bytedance

gptbot

ahrefsbot

script

googlebot

Resources

githubhttps://github.com/Microsoft/code-push ↗

packagehttps://www.npmjs.com/package/code-push-cli ↗

homepagehttps://appcenter.ms ↗