@react-navigation/bottom-tabs

Repo bus factorcaution

One contributor made about 98% of recent commits, creating a real concentration risk. Organization ownership and three additional active contributors partly compensate by preserving maintenance handoff capacity.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less transparent despite the presence of security scanning tooling.

Workflow auditcaution

All 13 workflows were analyzed successfully and all 54 action references are pinned, with no untrusted checkout or script-injection counts. A high-confidence template-injection finding and broad top-level write permissions remain workflow-hygiene concerns, though no dangerous sink was reported.