Package Health

@react-native-community/cli-server-api

Latest 20.2.0NPMNPM

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factorcaution

All recent repository commits came from one contributor, leaving current maintenance concentrated in a single person. Organization ownership provides some handoff capacity but does not remove the present concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating that source activity has recently slowed sharply despite the package's broader release history.

Repo package mentioncaution

The repository name does not match this subpackage and its README does not mention the package, creating some uncertainty about package-to-source correspondence. The organization-owned monorepo structure partly explains the name mismatch but does not fully resolve the missing mention.

Repo toolingcaution

The repository uses TypeScript, Babel, and npm build tooling, showing an established build process, but no security-scanning tooling was detected.

Security policycaution

No repository security policy was found, reducing disclosure transparency for a package that handles development-server functionality.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10854
@react-native-community/cli-server-api is vulnerable to Command Injection in versions 0.0.1 - 17.0.0, 18.0.0 - 18.0.0 and 19.0.0 - 19.1.1.
0.0.1 - 17.0.018.0.0 - 18.0.019.0.0 - 19.1.1
Critical

Package versions

Direct Dependencies

DependencyLast ReleaseScore
ws
Version ^6.2.3
—
—
open
Version ^6.2.0
—
—
connect
Version ^3.6.5
—
—
nocache
Version ^3.0.1
—
—
body-parser
Version ^2.2.2
—
—

Weekly Downloads

Info

Last Published
3 months ago
Created
6 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform