react-native-device-info

Lifecycle scriptscaution

A prepare script runs during installation, which is common for packages that build or prepare published artifacts but adds execution during installation.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the last three months, a meaningful maintenance concern despite the recent release and push timestamp.

Repo issue activitycaution

There are only three open issues, while 14 pull requests were opened in the last month; no pull requests were merged in that period, so activity is mixed rather than clearly healthy.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented for a widely used native integration library.

Workflow auditcaution

All eight workflows were analyzed, with no untrusted checkout or script-injection findings, but all 50 action references are unpinned, one workflow installs an ad hoc package, and the audit had one failed file.