@expo/metro-file-map
A metro-file-map fork for Expo used with the Metro bundler
78%
Total Score
healthy
Active Expo backing and rapid releases outweigh the incomplete workflow audit and weak package-specific repository reference.
Health Score Breakdown
The Expo organization provides backing, but several publishing accounts use outside or personal domains, including ide, bycedric, tsapeta, and philpl. This is an account-hygiene caution rather than evidence of a weak maintenance team.
The linked repository name does not match the package and its README does not mention @expo/metro-file-map. The mismatch is plausible for an Expo monorepo subpackage, but the missing explicit reference leaves package ownership less transparent.
The audit covered only 30 of 54 workflows, so it is incomplete and cannot provide a clean bill of health. It found high-confidence template-injection patterns and high-confidence ad hoc package installs, but no untrusted checkouts or script-injection sinks; the low-confidence cache findings are hygiene concerns only.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 2g Version ^1.0.1 | — | — |
debug Version ^4.3.4 | — | — |
walker Version ^1.0.8 | — | — |
invariant Version ^2.2.4 | — | — |
fb-watchman Version ^2.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 5 months ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.