@react-native/community-cli-plugin
Core CLI commands for React Native
76%
Total Score
100
100
94
75
100
Health Score Breakdown
The project uses Babel, TypeScript, and npm scripts, but no security-scanning tools were detected, leaving a modest security-process gap.
No repository security policy was detected, reducing transparency around vulnerability reporting and response expectations.
The audit covered 30 of 36 workflows, found 108 of 117 action references unpinned, and reported high-confidence template-injection and unpinned-image findings. Pull-request-target and workflow-run triggers were present, but no untrusted checkout or script-injection sinks were found, keeping this a significant hygiene caution rather than a standalone severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 debug Version ^4.4.0 | — | — |
metro Version ^0.87.0 | — | — |
semver Version ^7.1.3 | — | — |
invariant Version ^2.2.4 | — | — |
@react-native/asset-utils Version 0.87.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 3 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.