mrkeyoor.com_
Fri 30 Oct 13:43 UTC
Webevaluationupdated 30 Oct 2026

meteor review

Meteor is a JavaScript framework for building web applications. Its dedicated command-line tool creates, runs and manages projects, with a frontend choice during project creation.

Verdict

Meteor's repository npm install succeeded in 45 seconds, but skipped build and test steps leave application readiness unverified. Evaluate its dedicated project workflow with a small application. Resolve the release choice before following migration advice: the latest-release endpoint returned 3.5.3 while supplied upstream evidence identifies 3.5.4 as published and recommended. This review did not independently inspect 3.5.4's changes or migration requirements.

We ran it

Lab card: what happened when we ran meteorScreenshot of meteor (meteor.com)
Install✓ · 45s362 packages · 185 MB
Buildn/ano build script
Testsn/ano test script
Known vulns00 critical · 0 high · 0 moderate · 0 low (npm audit)
Repo5569 files~383,685 lines of source · 55.7 MB · 24 CI workflows

Answers from our run

Does meteor build from source?

Dependencies installed in 45 seconds (362 packages), and the project has no separate build step. We cloned commit 5e845e4 into a clean Debian container with 3 CPUs and no project-specific setup.

Does meteor have tests you can run?

Not through a standard command: the project exposes no test script or target that our harness could run.

Does meteor have known vulnerabilities in its dependencies?

npm audit found none in the dependency tree at the time of our run.

Who should not use meteor?

Projects requiring the npm Meteor Tool to be an ordinary application dependency: the installation guide says not to put it in package.json.

What are the alternatives to meteor?

Express, Feathers. Meteor's repository npm install succeeded in 45 seconds, but skipped build and test steps leave application readiness unverified.

SetupN/ARepository dependencies installed, but creating and running an application with a supported toolchain was not reproduced.
Docs3/5Under the visible documentation-only rubric, 3/5 credits a documented basic project path and explicit prerequisites. Instructions were not executed, and conflicting release signals require a separate version check.
CommunityN/AThe supplied activity feed records repository work, but support response quality and maintainer capacity were not assessed.
MaturityN/AThe repository install did not assess application behavior, release migrations or production reliability.

Who it’s for

JavaScript teams evaluating Meteor's project workflow alongside their frontend choice.
Existing Meteor maintainers prepared to check release-specific migration instructions.

Who it’s NOT for

Projects requiring the npm Meteor Tool to be an ordinary application dependency: the installation guide says not to put it in package.json.
Developers limited to a 32-bit operating system: the installation guide supports only 64-bit systems.
iOS projects without access to Xcode: the installation guide requires it for iOS development.

Setup reality

Our October 27, 2026 repository run at commit 5e845e4 recorded a successful npm install in 45 seconds, 362 dependencies and 185 MB on disk. Build and test steps were skipped because no script or target was found. Npm audit reported 0 known vulnerabilities. No application launch was recorded.

The documented application path uses the Meteor command-line tool to create and run projects. The npm Meteor Tool is an installer and should not be added to an application's package.json.

The configured sandbox used 3 CPUs, 8 GB RAM and image lab-node:22. That image label does not establish the actual runtime or operating-system version. The installation guide lists Meteor 3.5 with bundled Node.js 24 and requires Node.js v24 or higher for the documented npm installer; this run does not confirm that toolchain.

Meteor's repository dependencies installed successfully, but the recorded run did not establish whether a Meteor application could start or work. For JavaScript teams considering adoption, the next useful check is a small application using the intended release and frontend.

Meteor applications use a dedicated command-line tool

The installation guide explains how Meteor's command-line tool creates, runs and manages projects. Project creation prompts for a name and frontend framework. Evaluate that project workflow alongside the frontend you want to use.

The guide explicitly warns against putting the npm Meteor Tool in an application's package.json because that package is an installer. Teams that require tooling to behave like ordinary application dependencies should check whether this arrangement fits their requirements.

What happened when we ran it

Our Meteor npm install succeeded in 45 seconds at commit 5e845e4 on October 27, 2026. The run recorded 362 dependencies and 185 MB on disk. Build and test steps were skipped because no script or target was found, leaving application readiness unverified.

The record contains no application launch, browser check, passing build or passing test result. It also contains no application startup or request timings. These omissions limit the review; they do not establish a framework defect.

Npm audit reported 0 known vulnerabilities, with 0 critical, high, moderate and low findings. That result applies to the recorded npm environment. It does not establish the security of a later application or verify its authorization rules.

The sandbox configuration was 3 CPUs, 8 GB RAM and image lab-node:22. The image label does not establish actual Node.js or operating-system versions. The checkout contained 5,569 files, approximately 383,685 source lines and 55.7 MB. The scan found 24 CI workflow files, no Dockerfile and no tests directory. Those scan results do not establish passing CI or the absence of testing machinery.

Check the release and its Node requirements

The installation guide lists Meteor 3.5 with bundled Node.js 24 and says to have Node.js v24 or higher installed for its documented npm installer. These are upstream instructions, not runtime versions measured in the sandbox.

The guide also warns that changing Node versions under a version manager with separate global package directories requires reinstalling the meteor npm package for the newly selected version. Otherwise, the meteor command will no longer be found.

Only 64-bit operating systems are supported, and iOS development requires Xcode. Check these requirements on the machines that will develop the application. This repository run did not validate mobile packaging.

The supplied release sources disagree about the current version

The latest-release endpoint returned release/METEOR@3.5.3, published October 16, 2026. Other supplied upstream evidence identifies 3.5.4: the repository README displays it, and merged PR #14882 says the npm meteor installer already publishes 3.5.4 as latest. Merged PR #14881 calls 3.5.4 the recommended release and includes it among the security releases whose changelog entries it restores. Both PRs appear in the supplied activity feed.

The endpoint's 3.5.3 response therefore conflicts with explicit newer-version signals. It should not be used to select the current release on its own. The supplied 3.5.3 notes also cannot establish sufficient migration guidance for 3.5.4: the changes and migration requirements of 3.5.4 were not independently inspected for this review.

For 3.5.3 specifically, the notes describe OAuth validation fixes and changes to dynamic-import requests. The 3.5.3 notes tell users to deploy the updated dynamic-import client and server together. They also describe changed Google native sign-in configuration. These are upstream instructions, not fixes reproduced in our sandbox. Read the notes for the release you intend to deploy and verify the affected application flows.

Express and Feathers offer different starting points

Express describes itself as a minimalist web framework for Node.js. Its README demonstrates a route and a listening server and says Express does not force a specific ORM or template engine. Evaluate it when HTTP routing is the framework capability you want to start with while choosing those other components separately.

Feathers is a framework for web APIs and real-time applications with TypeScript or JavaScript. Its README describes support for multiple databases and different frontends. Evaluate it when that API-centered model fits the project.

Neither alternative was run alongside Meteor in this review. These comparisons describe documented architecture, without a measured difference in performance or implementation effort.

What to verify before choosing Meteor

Documentation receives 3/5 under this documentation-only rubric: 1 means no usable entry point, 3 means a documented basic path, and 5 means independently checked coverage of relevant paths. The installation guide supplies a basic project lifecycle and explicit platform and Node requirements. Its instructions were not executed in this run, and the release-source conflict requires an additional version check.

Setup ease, community support and production maturity remain unassessed. Create a small application with the intended release and frontend, check that release's migration guidance, and verify a real user flow before committing the larger project.

Alternatives

ProjectWhat it isPick it when
Express gh↗A minimalist web framework for Node.js.Evaluate Express when HTTP routing is your starting point and you want to choose an ORM and template engine separately.
FeathersA JavaScript and TypeScript framework for web APIs and real-time applications.Evaluate Feathers when its API-centered model and documented database and frontend choices fit your project.

What people are saying

  1. [velocity-scout] meteor/meteor

Sources

  1. Meteor installation guide
  2. Express README
  3. Feathers README
  4. Meteor release endpoint
  5. Meteor repository facts
  6. Meteor recent issue and PR activity

More web reviews

floating-ui · firefox · algorithm-visualizer · wagtail · ardia · frankenphp · the whole board →