react-native-tab-view

Build provenancecaution

No build attestation or trusted publisher was reported, leaving artifact provenance less transparent than it could be; the package's active project and regular releases provide some compensating evidence.

Repo bus factorcaution

One contributor made about 98% of the last three months' commits, creating a meaningful continuity risk despite three additional contributors remaining active.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All 13 workflows were analyzed and all 54 action references are pinned. A high-confidence template-injection finding and seven workflows with top-level write permissions warrant hygiene attention, but no untrusted checkout or script-injection sink was found alongside the trigger.