expo-glass-effect

Maintainerscaution

The package has 13 publishing accounts and clear organization backing, so the list does not indicate a maintenance bus factor. However, accounts such as brentvatne, exponent, kudochien, alanhughes, ccheever, szdziedzic, wschurman, ide, bycedric, tsapeta, philpl, and others use outside domains, creating account-hygiene risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention expo-glass-effect, creating some uncertainty about package-to-repository linkage. The package file tree does show Expo module source and build files, which partly compensates.

Version stabilitycaution

The assessed release is a stable, non-prerelease version, although the reported latest version is 57.0.4 while this release is 58.0.3, which introduces a small data-consistency concern.

Workflow auditcaution

All 136 analyzed action references are pinned, and no untrusted checkout or script-injection sinks were found. The audit is incomplete because only 30 of 54 workflows were analyzed; high-confidence template-injection findings were not in the workflows with pull_request_target triggers, so they remain hygiene concerns rather than a severe risk.