Pre-release version of the Expo development launcher package for testing.
86%
Total Score
healthy
Frequent releases and active Expo ownership support a dependable release despite incomplete workflow coverage.
The package has 13 registry publishers and organizational backing, but several publish accounts use outside domains, including ide, bycedric, tsapeta, and philpl; this is an account-hygiene caution rather than evidence of limited maintenance capacity.
The repository name does not match this package and its README does not mention expo-dev-launcher. A name mismatch is normal for a monorepo, but the lack of a direct README mention warrants caution about the package-to-repository link.
All 136 analyzed action references are pinned and no untrusted checkouts or script injections were found, but only 30 of 53 workflows were analyzed; high-confidence template-injection findings and several ad hoc package installs remain hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
expo-dev-menu Version ~58.0.11 | — | — |
expo-manifests Version ~58.0.1 | — | — |
@expo/schema-utils Version ^58.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.