expo-document-picker
Provides access to the system's UI for selecting documents from the available providers on the user's device.
82%
Total Score
healthy
Healthy overall, with an incomplete workflow review and repository linkage concerns.
Health Score Breakdown
The repository is organization-owned, so the registry maintainer list is not a measure of maintenance capacity. However, several publishing accounts use consumer or outside domains, including brentvatne, exponent, kudochien, alanhughes, ccheever, szdziedzic, wschurman, ide, bycedric, tsapeta, and philpl; this is an account-hygiene caution despite the Expo backing.
The linked repository name does not match expo-document-picker and its README does not mention the package. Although a monorepo name mismatch can be normal, the lack of an explicit README mention weakens package-to-source transparency.
The audit analyzed only 30 of 54 workflows, so coverage is incomplete. It found several high-confidence template-injection findings and high-confidence ad hoc package installs; no untrusted checkout or script-injection sink was reported, and all 136 action references are pinned.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 14 days ago
- Created
- 7 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.