Skip to content

v0.5.1 — easier evaluation and community feedback

Choose a tag to compare

View all tags
@AfanasievN AfanasievN released this 21 Jul 18:10
· 31 commits to main since this release
v0.5.1
116ec59

v0.5.1 — easier evaluation and community feedback

This patch release improves how React Native teams discover, evaluate, and contribute to the
package. It does not change the public signal API, event schema, or default probe behavior.

Highlights

A clearer evaluation path

  • The documentation site is now the canonical npm and GitHub homepage.
  • The README leads with the library's product boundary and differentiators instead of maintainer
    services: zero runtime dependencies, no vendor backend, no persistent device identifier, and no
    client-side risk score.
  • Evaluation links now lead directly to installation, the signal catalog, integration Q&A, adoption
    stories, and sanitized physical-device reporting.
  • The documentation landing page adds explicit GitHub and community actions while keeping local
    collection and the Signal Bench screenshot as the primary evidence.

Honest physical-device compatibility

The new compatibility matrix distinguishes three levels:

  • automated build verification;
  • a reproducible community report from physical hardware;
  • a result reproduced by a maintainer on comparable hardware.

Simulator compilation is not presented as physical-device validation. The initial matrix remains
empty until real sanitized reports are contributed.

Better contributor entry points

  • A dedicated device form captures package, React Native, platform, OS, device class, build type,
    and probe outcomes while warning contributors not to publish sensitive event data.
  • A dedicated raw-signal proposal form requires platform API provenance, privacy impact, omission
    semantics, and confirmation that the proposal is not a score, verdict, identifier, or vendor call.
  • Contributor documentation links to scoped starter issues and GitHub Discussions.

Android lint compatibility

The Android network provider now structures permission-gated reads so Android lint can prove that
ACCESS_NETWORK_STATE is checked before protected APIs are called. The package still declares no
permission, and missing host permission still causes affected optional values to be omitted.

Compatibility and privacy

  • Compatible with React Native 0.76+ and the New Architecture.
  • No public TypeScript or native signal contract changes.
  • No npm runtime, Gradle runtime, CocoaPods, or bundled native-binary dependencies added.
  • No Android permissions, permission prompts, network requests, adoption telemetry, persistent
    identifiers, QUERY_ALL_PACKAGES, or Apple Required-Reason API declarations added.

Upgrade

npm install react-native-device-risk-signals@0.5.1

For iOS applications, refresh CocoaPods after updating the package:

cd ios && bundle exec pod install

No configuration or data-contract migration is required.

See the complete changelog,
device compatibility matrix,
and documentation.

Assets 2
Loading