expo-notifications
Provides an API to fetch push notification tokens and to present, schedule, receive, and respond to notifications.
87%
Total Score
healthy
Active Expo maintenance, a licensed typed package, and strong repository activity outweigh workflow and provenance gaps.
Health Score Breakdown
No build attestation or trusted-publisher identity is present, leaving publication provenance less independently verifiable despite the package's strong maintenance evidence.
The package has 13 publish-access accounts and clear Expo ownership, though several accounts use consumer or outside domains, including brentvatne, exponent, kudochien, alanhughes, ccheever, szdziedzic, wschurman, ide, bycedric, tsapeta, philpl.
All 136 analyzed action references are pinned and no untrusted checkout or script-injection sinks were found, but only 30 of 54 workflows were analyzed; high-confidence template-injection findings and top-level write permissions remain workflow hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 badgin Version ^1.1.5 | — | — |
expo-constants Version ~57.0.21 | — | — |
abort-controller Version ^3.0.0 | — | — |
expo-application Version ~57.0.3 | — | — |
@expo/image-utils Version ^0.11.6 | — | — |
Weekly Downloads
Info
- Last Published
- 7 days ago
- Created
- 6 years ago
- Unpacked Size
- 1.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.