@onboarding-yak/react-native@0.7.2
Render remotely configured OnboardingYak onboarding flows in React Native apps.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe network activity supports the package's documented purpose of rendering remote onboarding flows and reporting onboarding analytics. The README describes the event data and says answer text and selected choices are not sent; no unrelated collection or malicious behavior was identified.
Decision evidence
public snapshot- The README documents the runtime onboarding events, their fields, and that answers and selected choices are not sent as analytics.
- The SDK sends flow data and analytics to paths on the configured baseUrl, using the app's API key.
- The package describes itself as a renderer for remotely configured onboarding flows, consistent with those requests.
- Mounting the component fetches a remote flow and sends analytics events by default.
Source & flagged code
4 flaggedThe README documents the runtime onboarding events, their fields, and that answers and selected choices are not sent as analytics.
README.mdView on unpkg · L257The package describes itself as a renderer for remotely configured onboarding flows, consistent with those requests.
README.mdView on unpkg · L62Findings
Affected versions and remediation
This report applies to @onboarding-yak/react-native@0.7.2.
See all versions of @onboarding-yak/react-native for other recorded verdicts.
- Review the evidence and your use of @onboarding-yak/react-native@0.7.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.