Anyone with Ionic Deploy usage affected?
Ok, having read all the comments (Oh man, how many people have an opinion on this but no idea what they are talking about…) “only” Rollout.io and JSPatch seem to be affected as they are somehow exposing or could expose private APIs.
The key part of JSPatch is that it exposes arbitrary, uncontrolled access to native APIs. You could use it to call private APIs even because Objective-C doesn’t distinguish between public and private APIs at runtime, so Xcode’s compiler checks and Apple’s static analysis can’t anticipate which APIs are possibly called.
Also a ‘reaction’ from the React Native people: