@expo/require-utils
Reusable require and Node resolution utilities library for Expo
82%
Total Score
healthy
Active Expo maintenance and strong release hygiene outweigh an incomplete workflow audit with template-injection findings.
Health Score Breakdown
The package has 13 publish-access accounts, including Expo-domain accounts; the listed Gmail, jameside.com, bycedric.com, tsapeta.com, and kitten.sh accounts are account-hygiene concerns, but organizational backing compensates for limited domain concentration.
The repository name does not match the package and its README does not mention it, which weakens package-to-repository traceability. The Expo monorepo context makes a subpackage explanation plausible but does not remove the transparency gap.
The audit covered only 30 of 54 workflows and found 18 high-confidence template-injection findings, plus high-confidence ad hoc package installs; no untrusted checkout or script-injection sinks were reported, and all 136 action references were pinned. The incomplete coverage and workflow findings warrant caution, but the evidence does not establish a severe release compromise.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @babel/core Version ^7.25.2 | — | — |
@babel/code-frame Version ^7.20.0 | — | — |
@babel/plugin-transform-modules-commonjs Version ^7.24.8 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 8 months ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.