@react-native/jest-preset

Repo package mentioncaution

The linked repository does not match the package name and does not mention it in its README. A monorepo explains the name mismatch, but the lack of any package mention leaves a provenance and ownership ambiguity.

Repo toolingcaution

The project uses build tooling, but no security scanning tools were detected. The large active project and separate workflow audit provide some compensating evidence, though security-tool coverage is incomplete.

Security policycaution

No repository security policy was detected. This is a transparency gap for a large project, although it does not by itself indicate abandonment or unsafe code.

Version stabilitycaution

Version 0.88.0 is not a prerelease, but 95% of recent releases were prereleases, which makes the surrounding release stream less stable.

Workflow auditcaution

The audit found 88 unpinned actions out of 95, high-confidence template-injection findings, broad inherited secrets, and some write-scoped workflows; 6 of 36 workflows were not analyzed. Pull-request triggers had no reported untrusted checkouts or script injection, but the remaining CI hygiene materially lowers confidence in build controls.