react-native-reanimated
More powerful alternative to Animated library for React Native.
82%
Total Score
healthy
Healthy: active organization-backed maintenance and a current, well-attested release outweigh workflow hygiene gaps.
Health Score Breakdown
Two of three registry publishing accounts use the organization domain, while tjzel publishes through a Gmail account. The company-backed project offsets the account-hygiene concern, but that mailbox remains weaker publishing control.
The repository uses TypeScript, npm scripts, and Babel, but no security-scanning tools were detected. This is a modest maintenance and review gap rather than evidence of abandonment.
No repository security policy was detected, leaving vulnerability reporting and response expectations less transparent.
The audit covered only 30 of 46 workflows and found 12 workflows with top-level write permissions, so it is incomplete and not a clean bill of health. A high-confidence template-injection finding and several adhoc package installs add workflow hygiene concerns, but no untrusted checkout or script-injection sink was found.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2022-24373 react-native-reanimated is vulnerable to Inefficient Regular Expression Complexity in versions 0.0.0 - 2.10.0. | 0.0.0 - 2.10.0 | High |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 semver Version ^7.7.3 | — | — |
react-native-is-edge-to-edge Version ^1.3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 8 years ago
- Unpacked Size
- 4.8 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.