@expo/ui
A collection of UI components
84%
Total Score
healthy
Frequent releases and active Expo maintenance outweigh incomplete workflow coverage and repository-package naming ambiguity.
Health Score Breakdown
The organization-backed package has 13 registry publishers, but several publish through personal or outside domains, including jameside.com, bycedric.com, tsapeta.com, kitten.sh, and multiple gmail.com accounts; this is an account-hygiene caution rather than evidence of weak maintenance capacity.
The linked repository name does not match @expo/ui and its README does not mention the package. This can be normal for a monorepo, but the lack of an explicit README mention leaves package-to-repository ownership less transparent.
The audit found no untrusted checkouts or script injections and all 136 action references are pinned, but only 30 of 54 workflows were analyzed and it reported high-confidence template-injection findings plus high-confidence ad hoc package installs. The template findings are not corroborated by an untrusted checkout in the reported paths, so this is a hygiene and coverage concern rather than a severe release risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sf-symbols-typescript Version ^2.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 hours ago
- Created
- 1 year ago
- Unpacked Size
- 37 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.