react-native-best-practices

Fail

Audited by Runlayer on Feb 26, 2026

Risk Level: HIGH
Scan Summary
Max Score
92%
Files
31
Flagged
11
Chunks
33
Flagged Files (11)
react-native-best-practices/references/bundle-analyze-js.mdHIGH
91.5%

Malicious tool definition detected

## Quick Command ```bash # React Native CLI npx react-native bundle \ --entry-file index.js \ --bundle-output output.js \ --platform ios \ --sourcemap-output output.js.map \ --dev false --minify true && \ npx source-map-explorer output.js --no-border-checks # Expo EXPO_UNSTABLE_ATLAS=true npx expo export --platform ios && npx expo-atlas ``` ## When to Use - JS bundle seems too large - Want to identify heavy dependencies - Investigating startup time issues - Before/after optimization comparison >

react-native-best-practices/references/native-android-16kb-alignment.mdMEDIUM
84.3%

Malicious tool definition detected

If misaligned libraries are found, trace them to source packages (see below) 4. Update, replace, or remove the affected dependencies For runtime testing, use the [16KB Android Emulator image][] or enable "Boot with 16KB page size" on Pixel 8/8a/9 devices.

react-native-best-practices/references/bundle-analyze-app.mdMEDIUM
84.2%

Malicious tool definition detected

react-native-best-practices/references/js-profile-react.mdMEDIUM
82.8%

Malicious tool definition detected

Tool: react-native-best-practices/references/js-profile-react.md Description: --- title: Profile React Performance impact: MEDIUM tags: profiling, devtools, re-renders, flamegraph --- # Skill: Profile React Performance Identify unnecessary re-renders and performance bottlenecks in React Native apps using React Native DevTools. ## Quick Command ```bash # Open React Native DevTools (press 'j' in Metro terminal) # Or shake device → "Open DevTools" # Go to Profiler tab → Start profiling → Perform ac

react-native-best-practices/references/js-react-compiler.mdMEDIUM
78.3%

Tool passed security scan

Malicious tool definition detected

Migrate to function components for full benefits.

react-native-best-practices/references/js-measure-fps.mdLOW
73.6%

Malicious tool definition detected

## Quick Command ```bash # Method 1: Built-in Perf Monitor # Shake device → Dev Menu → "Perf Monitor" # Method 2: Flashlight (Android, detailed reports) curl https://get.flashlight.dev | bash flashlight measure ``` ## When to Use - Animations feel choppy or janky - Scrolling is not smooth - Need baseline FPS metrics before/after optimization - Want to compare performance across builds ## Prerequisites - React Native app running on device/simulator - For Flashlight: Android device (iOS not suppor

react-native-best-practices/references/native-profiling.mdLOW
70.1%

Malicious tool definition detected

Stop to analyze ### Analyzing Results **Flame Graph:** - Zoom with scroll/pinch - Click to expand call stacks - Filter by keyword (e.g., "hermes") **Views:** - **Top Down**: From entry points down - **Bottom Up**: From slowest functions up - **Flame Chart**: Timeline visualization ### Reading the Call Stack Example analysis: ``` JS Thread activity after button press: - Event handler on main thread - Triggers JS work via sync JSI calls - Hermes processes React reconciliation - ~30% time in "commi

react-native-best-practices/POWER.mdLOW
64.1%

Tool passed security scan

react-native-best-practices/SKILL.mdLOW
64.0%

Tool passed security scan

react-native-best-practices/references/bundle-hermes-mmap.mdLOW
62.9%

Tool passed security scan

react-native-best-practices/references/native-platform-setup.mdLOW
54.8%

Tool passed security scan

Passed Files (20)Click to expand
react-native-best-practices/references/bundle-native-assets.mdOK
47.5%

Tool passed security scan

react-native-best-practices/references/bundle-r8-android.mdOK
46.7%

Tool passed security scan

react-native-best-practices/references/bundle-tree-shaking.mdOK
45.0%

Tool passed security scan

react-native-best-practices/references/native-memory-leaks.mdOK
43.5%

Tool passed security scan

react-native-best-practices/references/native-measure-tti.mdOK
36.7%

Tool passed security scan

react-native-best-practices/references/bundle-code-splitting.mdOK
33.8%

Tool passed security scan

react-native-best-practices/references/js-memory-leaks.mdOK
24.9%

Tool passed security scan

react-native-best-practices/references/native-sdks-over-polyfills.mdOK
23.8%

Tool passed security scan

react-native-best-practices/references/native-turbo-modules.mdOK
23.7%

Tool passed security scan

react-native-best-practices/references/bundle-library-size.mdOK
23.6%

Tool passed security scan

react-native-best-practices/references/js-animations-reanimated.mdOK
18.3%

Tool passed security scan

react-native-best-practices/agents/openai.yamlOK
15.5%

Tool passed security scan

react-native-best-practices/references/native-threading-model.mdOK
15.0%

Tool passed security scan

react-native-best-practices/references/js-atomic-state.mdOK
8.9%

Tool passed security scan

react-native-best-practices/references/js-uncontrolled-components.mdOK
8.3%

Tool passed security scan

react-native-best-practices/references/js-concurrent-react.mdOK
6.8%

Tool passed security scan

react-native-best-practices/references/js-lists-flatlist-flashlist.mdOK
6.0%

Tool passed security scan

react-native-best-practices/references/native-memory-patterns.mdOK
4.9%

Tool passed security scan

react-native-best-practices/references/bundle-barrel-exports.mdOK
4.3%

Tool passed security scan

react-native-best-practices/references/native-view-flattening.mdOK
2.3%

Tool passed security scan

Audit Metadata
Max File Score
92%
Classification
KNOWN_SERVER_PARTIAL_KNOWN
Files Scanned
31
Files Flagged
11
Chunks Analyzed
33
Analyzed
Feb 26, 2026, 04:25 PM
Security Audit — runlayer — react-native-best-practices