expo-json-utils

Repo package mentioncaution

The repository name does not match the package and its README does not mention expo-json-utils, so the package-to-source relationship is less transparent; the monorepo context makes a name mismatch ordinary but does not remove this documentation gap.

Token permissionscaution

24 analyzed workflows lack top-level permissions and 6 declare top-level write access, leaving avoidable workflow permission exposure despite no detected untrusted checkouts or script injection.

Version stabilitycaution

The assessed release is on a stable major and is not itself a prerelease, but 80% of recent releases were prereleases, which adds some release-process uncertainty.