@react-native/eslint-plugin

Repo package mentioncaution

The repository name does not match the package and its README does not mention @react-native/eslint-plugin, which warrants caution about package-to-repository traceability. The organization-backed monorepo context partly reduces that concern but does not remove it.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and handling less transparent than ideal. This is a documentation gap rather than evidence of abandonment.

Workflow auditcaution

The audit analyzed 30 of 35 workflows and found 122 of 133 action references unpinned, plus high-confidence template-injection and floating-image findings and medium-confidence secrets-inherit findings. No untrusted checkout or script-injection paths were reported, so this lowers hygiene confidence without making the release unfit.