expo-dev-menu
Expo/React Native module with the developer menu.
82%
Total Score
healthy
Frequent releases, active organization-backed development, and clear licensing outweigh repository-identity and workflow-coverage gaps.
Health Score Breakdown
No build attestation or trusted-publisher provenance is present, leaving the publication path less independently verifiable than it could be.
The package has 13 registry publishers, but several publish through addresses outside the Expo domain, including ide, bycedric, tsapeta, philpl, and others; this is an account-handoff hygiene caution, not evidence of limited maintenance capacity.
The linked repository name does not match expo-dev-menu and its README does not mention the package, so package-to-repository ownership is less transparent despite the Expo organization backing.
All 136 analyzed action references are pinned and no untrusted checkout or script injection was found, but only 30 of 54 workflows were analyzed; high-confidence template-injection findings are hygiene concerns without a corroborating dangerous sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 expo-dev-menu-interface Version ~57.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 17 hours ago
- Created
- 6 years ago
- Unpacked Size
- 2.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.