@gorhom/bottom-sheet

Build provenancecaution

No build attestation or trusted-publisher identity is present, limiting release transparency even though this is not evidence of malicious behavior by itself.

Maintainerscaution

Only one registry publishing account is listed. The matching repository owner provides some continuity, but the publishing base is still thin.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a material warning about current maintenance capacity despite the recent package release.

Repo issue activitycaution

Issue handling remains active, with five new issues and 11 closed in the last month, but no pull requests were merged in that period.

Repo toolingcaution

The repository uses TypeScript, Babel, and npm build tooling, but no security scanning tools were detected, leaving a security-process gap.