v0.3.0 — Explainable emulator and runtime signals
Highlights
Version 0.3.0 makes device observations more explainable and gives teams better raw inputs for their own risk models—without adding an SDK-side score, verdict, network transport, persistent identifier, or permission prompt.
Better emulator and device-farm evidence
- Expanded Android markers for Genymotion, BlueStacks, Nox, MEmu, LDPlayer, Andy, Droid4X, and KoPlayer.
- Added Firebase Test Lab, Android test-harness, iOS simulator-environment, and XCTest markers.
- Added structured evidence arrays and
emulatorChecksPerformed, so applications can understand why a marker was observed instead of relying only on an opaque boolean.
New explainable computation signals
- Added
deriveObservationMetrics(event)for ratios, consistency checks, and probe outcome counts computed from an already-collected event. - Added
runtime_timingobservations across the JavaScript event loop, React Native bridge, and native runtime. - Added
numeric_consistencyobservations for deterministic integer and floating-point calculations across JavaScript and native runtimes. - Extended
gpu_benchmarkwith median, p95, median absolute deviation, coefficient of variation, and warm-up slope.
runtime_timing, numeric_consistency, and gpu_benchmark remain disabled by default. Enable them only for calibrated cohorts after representative physical-device testing.
Integrity and posture coverage
- Expanded application provenance with Android SDK/signing and iOS receipt/build observations.
- Strengthened OS-integrity evidence for tracing, test keys, suspicious mounts, Zygisk, executable mappings, and environment markers.
- Added
device_security_posture, the default-offtransaction_safetyprobe, andderiveConsistencySignals().
Quality and documentation
- Verified parity across all 19 TurboModule methods in TypeScript, Kotlin, and Objective-C++.
- Added Android unit coverage for emulator classification and computation helpers.
- Updated the Probe Catalog, Data Dictionary, benchmark guide, README examples, and GitHub Pages documentation.
Upgrade
npm install react-native-device-risk-signals@0.3.0This is an additive minor release with no intentional breaking API changes. Review the new optional fields if your backend strictly validates the event schema.
Full changelog: v0.2.0...v0.3.0