axemclion

I am not sure if this is specific to React Native. In a regular Android application, this information is available in the JSON file. Having permissive credentials on the client is a security gap, no matter the technology.

If you have questions, you can ping the RN team too. I would love to help !!

> It’s been about 3 years now, with a 10+ person team now, so maybe I should write it all up somewhere.

If you want, we could put this up on the React Native Blog. Would make for an interesting read !!

I am a member of the React Native Core team

> On the documentation The document is not abandoned. Infact, we are actively working on fixing the document and reaching out to the community to identify gaps in documentation and fixing them. We are also moving docs to a separate repo to make sure that they are easy to contribute to.

> On Typed languages. A lot of people use React Native with Flow or TypeScript, and are able to benefit from type systems.

You should be able to use Mobile Center and CodePush separately today. We are planning to incrementally roll out a backward compatible solution over the next 2 months.

CodePush PM here - note that CodePush cannot push any native code to the app.

PM on the CodePush team here. The rejection notice seems to explicitly call out the native methods that are a cause of the issue. CodePush cannot inject private frameworks or expose any methods that React Native already exposes.

I would also recommend not using CodePush to completely what an app does.