expo-auth-session

Expo module for browser-based authentication

Latest 58.0.12

86%

Total Score

healthy

Frequent releases, active contributors, and organizational backing outweigh workflow-audit gaps and publisher-account hygiene concerns.

Health Score Breakdown

Maintainers

The package has 13 publishers, but several publish through personal or outside domains, including gmail.com, jameside.com, bycedric.com, tsapeta.com, and kitten.sh; this is an account-hygiene caution. The Expo organization backing and active contributor base partly compensate.

Repo package mention

The linked Expo monorepo does not match the package name and its README does not mention expo-auth-session, so package ownership is less directly transparent; the monorepo context makes a subpackage explanation plausible.

Workflow audit

All 136 analyzed action references are pinned and no untrusted checkout or script-injection sink was found. However, only 30 of 54 workflows were analyzed, six workflows grant top-level write permissions, and high-confidence template-injection findings remain; the low-confidence cache findings are hygiene only.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

Dependency	Last Release	Score
invariant Version ^2.2.4	—	—
expo-crypto Version ~58.0.6	—	—
expo-linking Version ~58.0.13	—	—
expo-constants Version ~58.0.12	—	—
expo-application Version ~58.1.1	—	—