React Native Auditor

A local-first React Native & Expo project auditor for release readiness, dependency health, and risk reports.

Audit React Native and Expo projects before release issues waste your time.

Quick start

npx react-native-auditor

The guided menu helps you run an audit, preview safe fixes, apply safe fixes interactively, or generate local reports. Direct CLI commands remain supported for repeatable local workflows and CI.

Run an audit directly:

npx react-native-auditor audit
npx react-native-auditor audit /path/to/project

Or install the CLI globally:

npm install -g react-native-auditor
rn-auditor

rn-auditor scan is an alias for rn-auditor audit.

Preview safe fixes without modifying files:

rn-auditor audit --fix

Apply safe fixes with confirmation:

rn-auditor audit --fix --interactive

What it checks

• React Native, Expo, and unknown project detection.
• Package manager detection and conflicting lockfiles.
• Missing .env.example documentation.
• Static Expo app identity configuration.
• EAS production profile readiness.
• Common Reanimated and Babel setup risk.
• Terminal and local static HTML reports.

React Native Auditor complements react-native doctor: doctor-style tools check the development environment, while this CLI focuses on project-level files and release risks.

Fixes

rn-auditor audit --fix previews safe fix suggestions and does not modify files.

rn-auditor audit --fix --interactive asks before applying each safe fix. In v0.8.0, the only applied fix is creating .env.example from existing .env keys when available. Values are never copied and existing files are not overwritten.

HTML report

rn-auditor report --html
rn-auditor report --html /path/to/project --output report.html

Without --output, the report is written to rn-auditor-report.html in the current directory.

Commands

| Command | Description | | --- | --- | | rn-auditor | Open the guided menu in an interactive terminal. | | rn-auditor audit [path] [--fix] [--interactive] | Audit a project and print the terminal report. | | rn-auditor scan [path] [--fix] [--interactive] | Alias for audit. | | rn-auditor report --html [path] [--output <file>] | Write a local static HTML report. |

In non-interactive environments, running rn-auditor without a subcommand prints guidance and exits successfully instead of opening the menu.

Native binary distribution

This npm package is a small JavaScript launcher around the native React Native Auditor CLI, written in Rust. It selects the bundled binary for the current platform and forwards the CLI arguments.

The package does not download a binary during installation and does not build Rust code on the user's machine. v0.1 includes macOS arm64/x64, Linux x64, and Windows x64 binaries. Node.js 18 or newer is required by the npm wrapper.

The package can also be launched through other npm-compatible package runners:

yarn dlx react-native-auditor
pnpm dlx react-native-auditor
bunx react-native-auditor

Security

React Native Auditor is local-first and uses conservative static checks:

• Does not upload project data or require a SaaS service.
• Does not execute target project commands.
• Does not run npm, Yarn, pnpm, Bun, Expo CLI, EAS CLI, or React Native CLI.
• Does not evaluate app.config.js or app.config.ts.
• Does not execute babel.config.js.
• Does not print .env values.

Documentation

See the GitHub repository for the full rule list, roadmap, security model, and contributing guide.

License

MIT