react / react-native
Repository health
Security, maintenance, dependencies and license for react/react-native.
Security
75 dependencies checked (25 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 4.4/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesOnly 0/9 actions pinned to SHAs2/10
- Code review before mergeOnly 2/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionDefault branch 'main' has no protection rule0/10
Maintenance
Outside contributions: 0 of 83 external pull requests merged (0% of those decided).From the 99 most recently updated pull requests, bots excluded.
Recent releases
- v0.88.015 Oct 2026 · 3 days after previous
- v0.88.0-rc.512 Oct 2026 · 6 days after previous
- v0.88.0-rc.47 Oct 2026 · 9 days after previous
- v0.88.0-rc.328 Sept 2026 · 6 days after previous
- v0.88.0-rc.222 Sept 2026 · 6 days after previous
Pull requests
- Open
- 17
- 0 stale (60+ days, no update in 30)
- Merged
- 0
- of the 30 latest
- Median time to merge
- Unknown
- From bots
- 0
- not listed below
Open
- #56612 Fix ccache being silently bypassed on iOS buildswildan-m · opened 181 days ago
- #59323 Delete deprecated RCTProfile systrace feature (#59323)christophpurrer · opened 1 day ago
- #56613 Sync ItemSeparator props on cell re-render in SectionListwildan-m · opened 180 days ago
- #59266 Bridgeless-context ReactScrollViewPropertyTest (#59266)christophpurrer · opened 2 days ago
- #59265 Bridgeless-context ReactAccessibilityDelegateTest (#59265)christophpurrer · opened 2 days ago
Recently merged
None from people in recent pull requests.
The 30 most recently updated pull requests.
Top contributors
- christophpurrer15 commits · 15%
- cortinico12 commits · 12%
- javache7 commits · 7%
- bartlomiejbloniarz6 commits · 6%
- robhogan4 commits · 4%
Of the 100 most recent commits.
Issues
- Open
- 1,256
- issues and pull requests, as GitHub counts them
- Oldest open
- 9.7 years
Most wanted
- #13938 Click and hold to select text using a text component88 reactions · 55 comments
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: MIT · 25 deps checked · 0 potential conflicts.