@react-native/debugger-frontend

Repo package mentioncaution

The linked repository neither matches the package name nor mentions it in its README. The package README points instead to a separate react-native-devtools-frontend source repository, so the collected repository does not clearly establish the package's source.

Repo toolingcaution

The project uses Babel, TypeScript, and npm scripts, showing an established build setup. No security-scanning tools were detected, which is a modest process gap.

Security policycaution

No repository security policy was found. This weakens disclosure transparency, although the active organization-backed project provides some compensation.

Version stabilitycaution

Version 0.87.1 is not a stable major release, and all recent releases are prereleases by the indicator. This adds some API-stability uncertainty despite the active release cadence.

Workflow auditcaution

The audit found 122 unpinned action references out of 133, several high-confidence template-injection findings, wide permissions in 8 workflows, and secrets inheritance; however, there were no untrusted checkouts or script-injection findings. Five of 35 workflows were not analyzed, so workflow hygiene remains a real caution rather than a release-blocking danger.