Asset support code for React Native.
22%
Total Score
critical
Deprecated since 0.87 and slated for removal; use AssetRegistry from react-native or @react-native/asset-utils instead.
The README explicitly marks both entry points deprecated since 0.87 and directs users to replacements, making this release unsuitable for new dependencies despite the documented API and repository tests.
The registry does not mark the package deprecated, but the package README independently documents deprecation and planned removal; the registry status does not compensate for that release-level guidance.
The repository name does not match the package and its README does not mention the package, which is a transparency concern, although the organization-backed React Native monorepo context makes a sub-package explanation plausible.
The audit is incomplete because 30 of 36 workflows were analyzed; among those, 88 of 95 action references are unpinned, with high-confidence template-injection and unpinned-image findings plus secrets inheritance in the publish workflow.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.