@react-native/normalize-color

Release historycaution

Only three releases are recorded, with no release in more than three years and none in the last 12 months. The active source repository provides some maintenance evidence, but this specific release is stale.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention this package, so the package-to-source relationship is not transparent even though the organization backing is plausible.

Repo toolingcaution

The repository uses Babel, TypeScript, and npm scripts, indicating an established build process, but no security-scanning tools were detected.

Type declarationscaution

No type declarations are published. This is a minor consumer-ergonomics gap for a small JavaScript utility, rather than evidence of abandonment.

Workflow auditcaution

The audit found 24 high-severity findings, including repeated high-confidence template-injection issues and unpinned images, plus 108 unpinned action references and inherited secrets. No untrusted checkout or script-injection path was detected, but 6 workflows were not analyzed.