Package Health

react-native-worklets

The React Native multithreading library

Latest 0.13.0NPMNPM

84%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

90

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Are you affected? Scan for Free

Health Score Breakdown

Dependency profilecaution

The package declares 16 runtime dependencies, including a substantial Babel transformation stack; this is a meaningful dependency surface but is consistent with its runtime and build functionality.

Repo toolingcaution

The project uses TypeScript, npm scripts, and Babel, but no security-scanning tooling was detected, leaving a modest verification gap.

Security policycaution

No repository security policy was found, so the project does not clearly document how maintainers receive and handle vulnerability reports.

Version stabilitycaution

This is not a stable major release and 90% of recent releases are prereleases, which makes compatibility expectations less settled despite the strong release cadence.

Workflow auditcaution

All 72 analyzed action references are pinned and no untrusted checkout or script-injection sinks were found, but only 30 of 45 workflows were analyzed; a high-confidence template-injection finding and several top-level write permissions warrant caution.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-722550 New
react-native-worklets is vulnerable to Prototype Pollution in versions 0.5.0 - 0.12.1.
0.5.0 - 0.12.1
Medium

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
semver
Version ^7.7.4
—
—
@babel/types
Version ^7.27.1
—
—
whatwg-fetch
Version ^3.6.20
—
—
@babel/traverse
Version ^7.27.1
—
—
@babel/generator
Version ^7.27.1
—
—

Weekly Downloads

Info

Last Published
24 days ago
Created
6 years ago
Unpacked Size
17.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform