`@expo/logger` is a wrapper around `bunyan` library.
86%
Total Score
healthy
Active Expo-owned project with a license mismatch and a repository that does not clearly name this package.
The artifact declares BUSL-1.1 but its LICENSE file is detected as MIT, creating a meaningful licensing clarification gap despite having a license file.
The repository name does not match the package and its README does not explicitly name @expo/logger, creating some linkage ambiguity; the README does point to the package's exact monorepo path, which partly compensates.
All 20 workflows were analyzed with no untrusted checkouts or script injections, and all action references are pinned; high-confidence template-injection and inherited-secret findings still warrant workflow hygiene attention, while the remaining findings are lower-risk hygiene issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bunyan Version ^1.8.15 | — | — |
@types/bunyan Version ^1.8.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.