@react-native/normalize-colors

Workflow auditdanger

The audit analyzed 30 of 36 workflows and found 108 of 117 action references unpinned, high-confidence template-injection findings, floating container images, archived action use, and inherited secrets. No untrusted checkouts or script-injection sinks were found, so these are serious hygiene concerns but not independently a severe dependency-health verdict.

Repo issue activitycaution

The repository remains active, with 61 new issues and 167 new pull requests in the last month, although only 4 pull requests were merged in that period. The ongoing activity is positive, while the merge rate warrants mild caution.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some uncertainty about the linkage. Because the repository is an organization-owned monorepo, this is a caution rather than strong evidence of an unrelated project.

Repo toolingcaution

The repository uses build tooling, including Babel, TypeScript, and npm scripts, but no security scanning tools were detected. The missing scanning is a transparency and hygiene gap, not evidence of abandonment.

Security policycaution

No repository security policy was found. This weakens vulnerability-reporting transparency, though the active project backing and maintenance provide some compensation.