Config plugin to customize native build properties on prebuild
88%
Total Score
healthy
Healthy, backed by frequent releases and active Expo organization maintenance.
The repository name does not match the package and its README does not mention it, which is a transparency concern; the Expo organization and package tree show this is likely a monorepo subpackage, partly compensating for that gap.
The audit analyzed 30 of 53 workflows and found high-confidence template-injection findings plus adhoc package installation, though no untrusted checkout or script injection; the incomplete review and workflow hygiene issues warrant caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
semver Version ^7.6.0 | — | — |
resolve-from Version ^5.0.0 | — | — |
@expo/schema-utils Version ^57.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.