@react-native/assets-registry

Package scaffoldingdanger

The README explicitly marks both entry points deprecated since 0.87 and names replacements, so this release carries meaningful adoption and future-support risk despite documented release notes and repository tests.

Repo package mentioncaution

The linked repository does not match the package name and does not mention this package in its README. The organization-owned React Native monorepo makes a name mismatch plausible, but the lack of a README mention leaves package ownership less transparent.

Workflow auditcaution

The audit found 108 of 117 action references unpinned, high-confidence template-injection findings, floating container images, archived action use, and inherited secrets. No untrusted checkouts or script-injection findings were reported, which limits the impact but does not remove the hygiene concern.