expo-modules-jsi

Maintainerscaution

Thirteen registry publishers are listed and the package is backed by an organization, but several publishers use outside domains, including brentvatne, exponent, kudochien, alanhughes, ccheever, szdziedzic, wschurman, ide, bycedric, tsapeta, philpl. This is a mild account-hygiene concern, not evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name does not match expo-modules-jsi and its README does not mention the package. A monorepo mismatch is ordinary, but the missing README mention leaves some uncertainty about the exact package relationship.

Workflow auditcaution

The audit analyzed 30 of 54 workflows, so coverage is incomplete. It found high-confidence template-injection findings and high-confidence adhoc package installs, while untrusted checkouts and script injection were zero and all 136 action references were pinned; the findings warrant workflow-hygiene caution but not a severe package-health downgrade.