Package Health

react-native-share

Social share, sending simple data to other apps.

Latest 12.3.1NPMNPM

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last 3 months. Recent release and issue activity partly offsets this, but the direct coding activity is uneven.

Security policycaution

The repository has no security policy. That is a modest transparency gap for a widely used library, although CodeQL scanning provides some compensating security practice.

Workflow auditcaution

All 5 workflows were analyzed successfully with no high- or medium-confidence findings, and untrusted checkouts or script injection were absent. However, all 20 action references are unpinned and the release workflow has top-level write permissions, creating avoidable CI supply-chain and token-scope exposure.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10506 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
react-native-share is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 3.2.0 - 12.1.0.
3.2.0 - 12.1.0
High

Package versions

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
5 months ago
Created
11 years ago
Unpacked Size
0.4 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform