ESLint config for Expo apps
86%
Total Score
100
50
94
83
Eight runtime dependencies, including several ESLint plugins and TypeScript tooling, create a meaningful transitive maintenance surface for a configuration package.
The linked monorepo neither matches the package name nor mentions it in its README, which makes package ownership less transparent; the Expo organization backing partly compensates.
All 137 analyzed action references are pinned, and the reported template-injection findings do not overlap the two pull_request_target workflows; however, only 30 of 53 workflows were analyzed, leaving a real audit-coverage gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
globals Version ^16.0.0 | — | — |
eslint-plugin-expo Version ^1.1.0 | — | — |
eslint-plugin-react Version ^7.37.3 | — | — |
eslint-plugin-import Version ^2.30.0 | — | — |
@typescript-eslint/parser Version ^8.59.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.