react-native-gesture-handler

Name lookalikedanger

The package is flagged as borrowing the identity of the much more established react-is package, even though artifact overlap is 0.0 and the README does not identify it as a fork or integration; this creates a serious risk that consumers wanted the other package.

Repo toolingcaution

The project uses TypeScript, npm scripts, and Babel, but no security-scanning tools were detected; the missing scanning is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a native library.

Workflow auditcaution

All 25 workflows were analyzed, with no untrusted checkouts or script-injection findings, but 53 of 73 action references are unpinned. Three high-confidence template-injection findings are hygiene concerns here because no dangerous trigger was reported, while two low-severity adhoc-package findings add minor risk.