expo-keep-awake

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention it, which makes package-to-repository ownership less explicit; the organization-owned monorepo context partly explains the mismatch but does not remove the transparency gap.

Token permissionscaution

Twenty-four analyzed workflows lack top-level permissions and six declare top-level write access, leaving avoidable workflow-permission hygiene concerns despite the repository's otherwise strong activity.