Gathering detailed insights and metrics for react-native
Gathering detailed insights and metrics for react-native
A framework for building native applications using React
Installations
npm install react-nativeDeveloper Guide
BETA
Typescript
Yes
Module System
N/A
Min. Node Version
>=18
Node Version
18.20.7
NPM Version
10.8.2
Score
74.4
Supply Chain
44.8
Quality
96.1
Maintenance
100
Vulnerability
95.1
License
Releases
382
Languages
14
C++
JavaScript
Kotlin
Java
Objective-C++
Objective-C
Ruby
CMake
TypeScript
Shell
C
Assembly
Swift
HTML
C++ (30.74%)
JavaScript (16.66%)
Kotlin (14.01%)
Java (13.37%)
Objective-C++ (12.22%)
Objective-C (8.04%)
Ruby (2.83%)
CMake (0.79%)
TypeScript (0.51%)
Shell (0.38%)
C (0.31%)
Assembly (0.09%)
Swift (0.04%)
HTML (0.01%)
Developer
Download Statistics
Total Downloads
359,217,859
Last Day
579,215
Last Week
3,182,774
Last Month
12,976,519
Last Year
125,679,013
GitHub Statistics
MIT License
121,259 Stars
35,775 Commits
24,565 Forks
3,589 Watchers
216 Branches
2,786 Contributors
Updated on Mar 27, 2025
Maintainers
7
Package Meta Information
Latest Version
0.78.1
Package Id
react-native@0.78.1
Unpacked Size
70.31 MB
Size
23.30 MB
File Count
3,885
NPM Version
10.8.2
Node Version
18.20.7
Published on
Mar 19, 2025
Total Downloads
Cumulative downloads
Total Downloads
359,217,859
Last Day
3.9%
579,215
Compared to previous day
Last Week
10.1%
3,182,774
Compared to previous week
Last Month
13.9%
12,976,519
Compared to previous month
Last Year
41.8%
125,679,013
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
36
@jest/create-cache-key-function@react-native/assets-registry@react-native/codegen@react-native/community-cli-plugin@react-native/gradle-plugin@react-native/js-polyfills@react-native/normalize-colors@react-native/virtualized-listsabort-controlleranseransi-regexbabel-jestbabel-plugin-syntax-hermes-parserbase64-jschalkcommanderevent-target-shimflow-enums-runtimeglobinvariantjest-environment-nodememoize-onemetro-runtimemetro-source-mapnullthrowspretty-formatpromisereact-devtools-corereact-refreshregenerator-runtimeschedulersemverstacktrace-parserwhatwg-fetchwsyargs
Peer Dependencies
2
React Native
Learn once, write anywhere:
Build mobile apps with React.
Getting Started · Learn the Basics · Showcase · Contribute · Community · Support
React Native brings React's declarative UI framework to iOS and Android. With React Native, you use native UI controls and have full access to the native platform.
- Declarative. React makes it painless to create interactive UIs. Declarative views make your code more predictable and easier to debug.
- Component-Based. Build encapsulated components that manage their state, then compose them to make complex UIs.
- Developer Velocity. See local changes in seconds. Changes to JavaScript code can be live reloaded without rebuilding the native app.
- Portability. Reuse code across iOS, Android, and other platforms.
React Native is developed and supported by many companies and individual core contributors. Find out more in our ecosystem overview.
Contents
- Requirements
- Building your first React Native app
- Documentation
- Upgrading
- How to Contribute
- Code of Conduct
- License
📋 Requirements
React Native apps may target iOS 15.1 and Android 7.0 (API 24) or newer. You may use Windows, macOS, or Linux as your development operating system, though building and running iOS apps is limited to macOS. Tools like Expo can be used to work around this.
🎉 Building your first React Native app
Follow the Getting Started guide. The recommended way to install React Native depends on your project. Here you can find short guides for the most common scenarios:
📖 Documentation
The full documentation for React Native can be found on our website.
The React Native documentation discusses components, APIs, and topics that are specific to React Native. For further documentation on the React API that is shared between React Native and React DOM, refer to the React documentation.
The source for the React Native documentation and website is hosted on a separate repository, @facebook/react-native-website.
🚀 Upgrading
Upgrading to new versions of React Native may give you access to more APIs, views, developer tools, and other goodies. See the Upgrading Guide for instructions.
React Native releases are discussed in this discussion repo.
👏 How to Contribute
The main purpose of this repository is to continue evolving React Native core. We want to make contributing to this project as easy and transparent as possible, and we are grateful to the community for contributing bug fixes and improvements. Read below to learn how you can take part in improving React Native.
Code of Conduct
Facebook has adopted a Code of Conduct that we expect project participants to adhere to. Please read the full text so that you can understand what actions will and will not be tolerated.
Contributing Guide
Read our Contributing Guide to learn about our development process, how to propose bugfixes and improvements, and how to build and test your changes to React Native.
Open Source Roadmap
You can learn more about our vision for React Native in the Roadmap.
Good First Issues
We have a list of good first issues that contain bugs which have a relatively limited scope. This is a great place to get started, gain experience, and get familiar with our contribution process.
Discussions
Larger discussions and proposals are discussed in @react-native-community/discussions-and-proposals.
📄 License
React Native is MIT licensed, as found in the LICENSE file.
React Native documentation is Creative Commons licensed, as found in the LICENSE-docs file.
High
7.5/10
Summary
Regular expression denial of service in react-native
Affected Versions
>= 0.63.0, < 0.64.1
Patched Versions
0.64.1
High
7.5/10
Summary
Regular expression denial of service in react-native
Affected Versions
>= 0.59.0, < 0.62.3
Patched Versions
0.62.3
Reason
all changesets reviewed
Reason
30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
no dangerous workflow patterns detected
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/facebook/.github/SECURITY.md:1
- Info: Found linked content: github.com/facebook/.github/SECURITY.md:1
- Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy
- Info: Found text in security policy: github.com/facebook/.github/SECURITY.md:1
Reason
binaries present in source code
Details
- Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: packages/gradle-plugin/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: packages/helloworld/android/gradle/wrapper/gradle-wrapper.jar:1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/autorebase.yml:14
- Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/autorebase.yml:15
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/needs-attention.yml:13
- Info: topLevel 'contents' permission set to 'read': .github/workflows/autorebase.yml:9
- Warn: no topLevel permission defined: .github/workflows/cache-reaper.yml:1
- Warn: no topLevel permission defined: .github/workflows/check-for-reproducer.yml:1
- Warn: no topLevel permission defined: .github/workflows/check-nightly.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/close-pr.yml:6
- Warn: no topLevel permission defined: .github/workflows/create-release.yml:1
- Warn: topLevel 'statuses' permission set to 'write': .github/workflows/danger-pr.yml:13
- Warn: topLevel 'actions' permission set to 'write': .github/workflows/danger-pr.yml:8
- Warn: topLevel 'checks' permission set to 'write': .github/workflows/danger-pr.yml:9
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/danger-pr.yml:10
- Warn: no topLevel permission defined: .github/workflows/monitor-new-issues.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/needs-attention.yml:8
- Warn: no topLevel permission defined: .github/workflows/nightly.yml:1
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/on-issue-labeled.yml:8
- Warn: no topLevel permission defined: .github/workflows/prebuild-ios.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-bumped-packages.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/stale-bot.yml:1
- Warn: no topLevel permission defined: .github/workflows/test-all.yml:1
- Warn: no topLevel permission defined: .github/workflows/test-libraries-on-nightlies.yml:1
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/autorebase.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/autorebase.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/autorebase.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/autorebase.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cache-reaper.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/cache-reaper.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cache-reaper.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/cache-reaper.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-for-reproducer.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/check-for-reproducer.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-for-reproducer.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/check-for-reproducer.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-nightly.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/check-nightly.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/close-pr.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/close-pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/create-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/danger-pr.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/danger-pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/monitor-new-issues.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/monitor-new-issues.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/monitor-new-issues.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/monitor-new-issues.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/needs-attention.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/needs-attention.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/needs-attention.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/needs-attention.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/nightly.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/nightly.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/nightly.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/nightly.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/nightly.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/nightly.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/nightly.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/nightly.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-issue-labeled.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/on-issue-labeled.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-issue-labeled.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/on-issue-labeled.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-issue-labeled.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/on-issue-labeled.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-issue-labeled.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/on-issue-labeled.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-issue-labeled.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/on-issue-labeled.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prebuild-ios.yml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/prebuild-ios.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-bumped-packages.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-bumped-packages.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale-bot.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/stale-bot.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale-bot.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/stale-bot.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale-bot.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/stale-bot.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale-bot.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/stale-bot.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:436: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:517: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:417: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:455: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:547: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:551: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:556: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:585: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:628: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:645: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:248: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-all.yml:256: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:265: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:272: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:600: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:338: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:344: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:354: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:474: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:480: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-all.yml:657: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-all.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-libraries-on-nightlies.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-libraries-on-nightlies.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-libraries-on-nightlies.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react-native/test-libraries-on-nightlies.yml/main?enable=pin
- Info: 0 out of 90 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 5 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
15 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-2rxp-v6pw-ch6m
- Warn: Project is vulnerable to: GHSA-4xqq-m2hx-25v8
- Warn: Project is vulnerable to: GHSA-5866-49gr-22v4
- Warn: Project is vulnerable to: GHSA-r55c-59qm-vjw6
- Warn: Project is vulnerable to: GHSA-vg3r-rm7w-2xgh
- Warn: Project is vulnerable to: GHSA-vmwr-mc7x-5vc3
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
- Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
- Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
- Warn: Project is vulnerable to: GHSA-8g77-54rh-46hx
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Score
5.1
/10
Last Scanned on 2025-03-24
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More