@expo/expo-modules-macros-plugin

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected; that is a modest transparency and assurance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed successfully, all five action references are pinned, and there are no untrusted checkouts, script injection findings, or broad top-level write permissions. One high-confidence low-severity finding reports an ad hoc package installation in the publish workflow, which is a minor hygiene concern.