Default TypeScript configuration for React Native apps
82%
Total Score
100
86
67
100
The repository name does not match this package and its README does not mention the package, creating some uncertainty about package-to-repository ownership; the organization-backed monorepo context partly offsets the mismatch.
The project uses Babel, TypeScript, and npm scripts, showing an established build process, though no security-scanning tools were detected.
No repository security policy was found. This is a transparency gap, but the project's active maintenance and provenance provide partial compensation.
The audit covered 30 of 35 workflows and found 122 of 133 action references unpinned, plus high-confidence template-injection and floating-image findings; no untrusted checkouts or script injections were detected, so this is workflow hygiene risk rather than a standalone severe dependency-health failure.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.