expo-notifications

The package includes TypeScript declarations, a README, a changelog, and a clear MIT license. Its organization-backed repository shows broad recent contributor activity and ongoing maintenance, though the workflow review is incomplete.

Latest 57.0.21

NPM

88%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo package mention

The repository name does not match the package and its README does not mention expo-notifications. This is explainable for a monorepo, but the collected evidence does not directly confirm package-specific repository linkage.

Workflow audit

The audit found high-confidence template-injection findings and several high-confidence ad hoc package installations; the template findings do not overlap the observed pull_request_target workflows, limiting their direct impact. Only 30 of 53 workflows were analyzed, so workflow hygiene is not fully established.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

Dependency	Last Release	Score
badgin Version ^1.1.5	—	—
expo-constants Version ~57.0.19	—	—
abort-controller Version ^3.0.0	—	—
expo-application Version ~57.0.3	—	—
@expo/image-utils Version ^0.11.5	—	—