@react-native/eslint-config

Dependency profilecaution

The package has 12 runtime dependencies for an ESLint and Prettier configuration, adding some update surface but remaining consistent with a configuration bundle.

Repo package mentioncaution

The linked repository neither matches the package name nor mentions it in its README, creating some uncertainty about package-to-repository ownership; its organization backing and monorepo context partly reduce that concern.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less explicit for a widely used project.

Workflow auditcaution

The audit found 24 high-severity and 6 medium-severity findings, including high-confidence template-injection issues, unpinned images, archived action use, and inherited secrets; 93 of 100 action references are unpinned. Although no untrusted checkouts or script injections were detected, only 30 of 36 workflows were analyzed, so this is a material hygiene concern.