This package is part of the [React Native CLI](../../README.md). It contains utilities for building reusable commands targeting Apple platforms.
62%
Total Score
caution
Usable with caveats: recent maintenance is thin and a workflow audit found a high-confidence injection issue.
All recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance off but does not offset the current lack of observed breadth fully.
Only one commit from one active maintainer was recorded over the last 3 months, which is thin recent activity for an actively released project.
The repository has 45 open pull requests, 26 new pull requests, and no merged pull requests in the last month, suggesting review or integration backlog despite ongoing contributions.
The linked repository neither matches the package name nor mentions it in its README, which creates uncertainty about package-to-repository alignment; the monorepo structure partly explains the mismatch but does not remove it.
The repository uses TypeScript, Babel, and npm scripts, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
execa Version ^5.0.0 | — | — |
picocolors Version ^1.1.1 | — | — |
fast-xml-parser Version ^5.3.6 | — | — |
@react-native-community/cli-tools Version 20.2.0 | — | — |
@react-native-community/cli-config-apple Version 20.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.