meteor /meteor

Meteor, the JavaScript App Platform

★ 44,797⑂ 5,276👁 1,473⑃ 5,245● 9,417▤ 21◈ 194
JavaScriptNOASSERTIONCreated 2012-01-19meteor.com
44,797
stars
+1
5,276
forks
1,473
watchers
5,245
prs
9,417
issues
21
releases
194
discussions

README

Meteor is an ultra-simple environment for building modern web applications.



- Official Website
- Installation
- Documentation



 📚 Create your applications using modern JavaScript

Benefit from the latest technology updates to rapidly prototype and develop your applications.



 ✨ Integrate technologies you already use

Use popular frameworks and tools right out-of-the-box. Focus on building features instead of configuring disparate components yourself.



 💻 Build apps for any device

Use the same code whether you’re developing for web, iOS, Android, or desktop for a seamless update experience for your users.



 🔥 Getting Started

How about trying a tutorial to get started with your favorite technology?

|  React |
| - |
|  Blaze |
|  Vue |
|   Svelte |
|  Solid |

 🚀 Quick Start

On your platform, use this line:

shell
 npx meteor


🚀 To create a project:

shell
 meteor create


☄️ Run it:

shell
cd my-app
meteor


 💖 Sponsors

Meteor is made possible by our amazing sponsors. Support the project and get your logo here by visiting our Sponsorship page.

 🌟 Supernova Sponsors


  
    
      
        
      
    
    
      
        
      
    
  


 🌌 Nebula Sponsors


  
    
      
        
      
    
  




 🧱 Developer Resources

Building an application with Meteor?

 Build with AI coding assistants using Meteor Agent Skills
 Deploy on Galaxy
 Find packages on Atmosphere
 Discuss on Forums
 Join the Meteor Discord


Interested in helping or contributing to Meteor?  These resources will help:

 Core development guide
 Contribution guidelines
 Feature requests
 Issue tracker

Top issues

Discussions

Latest release

Meteor 3.5.3 release/[email protected] 2026-10-16
v3.5.3, 2026-10-13

 Highlights

- Validate Google and Facebook direct-login tokens against the application's OAuth configuration, use provider-verified Google identity fields, and keep Facebook verification errors from exposing the app secret.
- Prevent server crashes caused by invalid DDP protocol-handler names and unhandled asynchronous handler rejections.
- Include all modified top-level fields in allow/deny checks, closing a field-authorization bypass.
- Bound dynamic-import request size and complexity, batch large legitimate module graphs, and limit failed module reads and logging

Snapshot: 2026-11-10T09:35:25Z · Data license Apache-2.0 · JSON