@superrouteca/smap-react-native@1.0.6
sMap for React Native: a map view for Superroute's sMap service, over the sMap Android and iOS SDKs.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe entry point only re-exports map components, and the native helpers configure the stated sMap SDK. The inspected build and token flows are consistent with map integration; no unrelated install-time or import-time behavior was identified.
Decision evidence
public snapshot- The package describes itself as a React Native map wrapper for Superroute’s sMap service, and its entry point only re-exports map components and types.
- The iOS CocoaPods helper links the sMap SDK from a local package or the documented GitHub release source and adds a build phase to embed its MapLibre framework.
- The native map receives the configured base URL, nodes, API key, token and token callback; the JavaScript callback requests a token only when the native SDK asks for one.
Source & flagged code
7 flaggedPackage ships non-JavaScript build or shell helper files.
ios/smap_react_native.rbView on unpkgThe iOS CocoaPods helper links the sMap SDK from a local package or the documented GitHub release source and adds a build phase to embed its MapLibre framework.
ios/smap_react_native.rbView on unpkg · L18The iOS CocoaPods helper links the sMap SDK from a local package or the documented GitHub release source and adds a build phase to embed its MapLibre framework.
Findings
Affected versions and remediation
This report applies to @superrouteca/smap-react-native@1.0.6.
See all versions of @superrouteca/smap-react-native for other recorded verdicts.
- Review the evidence and your use of @superrouteca/smap-react-native@1.0.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.