@capacitor/ios

Maintainerscaution

The package has 20 publishing accounts and 11 under the primary organization domain, though consumer-domain accounts such as jcesarmobile, chuckytuh, trevorlambert, and alexgerardojacinto add some account-hygiene caution.

Repo toolingcaution

The repository uses build tooling but reports no security-scanning tools, leaving less evidence of automated security hygiene than ideal.

Workflow auditcaution

All 40 analyzed action references are unpinned, and eight workflows grant top-level write permissions; high-confidence template-injection findings occur in publishing workflows, but no dangerous trigger or untrusted checkout was reported. These are meaningful workflow-hygiene concerns rather than a standalone release-blocking risk.