expo-file-system
Provides access to the local file system on the device.
91%
Total Score
100
100
94
90
Health Score Breakdown
The linked repository name does not match the package and its README does not mention expo-file-system, which creates a package-to-repository transparency concern; the organization-owned Expo monorepo provides reasonable compensating context.
Twenty-four analyzed workflows lack top-level permission declarations and six declare top-level write access, creating a genuine workflow-hardening gap despite the absence of observed injection findings.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-39391 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. expo-file-system is vulnerable to Path Traversal in versions 0.0.1 - 19.0.22, 55.0.0 - 55.0.21 and 56.0.0 - 56.0.6. | 0.0.1 - 19.0.2255.0.0 - 55.0.2156.0.0 - 56.0.6 | High |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 8 years ago
- Unpacked Size
- 7.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.