react-native-webview
React Native WebView component for iOS, Android, macOS, and Windows
88%
Total Score
100
100
94
75
100
Health Score Breakdown
The project uses TypeScript, Babel, and npm build tooling, but no security-scanning tools were detected; that is a modest transparency and maintenance gap.
No repository security policy was found, leaving vulnerability reporting expectations undocumented for a widely used native integration package.
All 18 analyzed action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action; workflows were fully analyzed, with no untrusted checkout or script-injection findings.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2020-6506 react-native-webview is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 10.10.2. | 0.0.0 - 10.10.2 | Medium |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 invariant Version 2.2.4 | — | — |
escape-string-regexp Version ^4.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 10 years ago
- Unpacked Size
- 0.7 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.