react-native-maps

Lifecycle scriptscaution

The package runs a prepare script during installation, which adds some supply-chain and installation complexity, though no harmful behavior is shown by this signal alone.

Repo toolingcaution

The project uses TypeScript, Babel, and npm build tooling, but no security scanning tools were detected; this is a modest transparency gap rather than a dependency-blocking risk.

Workflow auditcaution

All six workflows were analyzed with no high- or medium-severity findings, no untrusted checkout or script-injection paths, and no broad top-level writes. However, all 16 action references are unpinned and a high-confidence low-severity audit found an ad hoc package installation outside a lockfile, weakening workflow reproducibility.