expo-device
A universal module that gets physical information about the device running the application
91%
Total Score
100
100
94
75
Health Score Breakdown
Two pull_request_target workflows exist among 53 workflows, but the analyzed workflows show no untrusted checkout or script-injection findings; this merits awareness without indicating a severe health problem.
The repository name does not match the package and its README does not mention expo-device. Although a monorepo name mismatch can be normal, the lack of an explicit package reference creates a transparency caveat.
24 of 30 analyzed workflows lack top-level token permissions and six declare top-level write access, leaving workflow privilege hygiene weaker than ideal despite the repository's active maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ua-parser-js Version ^0.7.33 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 7 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.