react-native-mmkv

Build provenancecaution

No build attestation or trusted-publisher provenance was reported, leaving release origin less verifiable even though the package has strong maintenance evidence.

Security policycaution

No security policy was found in the repository, reducing transparency around vulnerability reporting and response expectations.

Workflow auditcaution

All 49 analyzed action references are unpinned, and a high-confidence bot-condition finding affects the lockfile workflow; archived actions also appear in release workflows. Low-confidence cache findings are hygiene concerns, but no untrusted checkout or script-injection path was detected.