react-native-get-random-values

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers have less evidence connecting the published artifact to its source.

Maintainerscaution

Only one registry account has publish access. That is a limited publishing base and creates some continuity risk for a user-owned project.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single publishing maintainer offers limited visible project backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The same-period release provides some counterevidence, but ongoing maintenance capacity remains uncertain.

Repo toolingcaution

No build tool or security scanning tool was detected, which weakens automated quality and security coverage for a native package.