jest-expo
A Jest preset to painlessly test your Expo / React Native apps.
88%
Total Score
healthy
Active Expo-backed development and signed provenance outweigh account-hygiene and incomplete workflow-audit concerns.
Health Score Breakdown
The organization-backed project has 13 registry maintainers, but several publish through outside domains: brentvatne, exponent, kudochien, alanhughes, ccheever, szdziedzic, wschurman, ide, bycedric, tsapeta, philpl, and wschurman’s listed account context. This is account-hygiene risk, not evidence of weak maintenance capacity.
The repository name does not match jest-expo and its README does not mention the package, which creates some ownership-transparency uncertainty; the package tree nevertheless shows it is part of the large Expo monorepo.
The audit analyzed only 30 of 54 workflows, so coverage is incomplete. It found high-confidence template-injection findings and several high-confidence ad hoc package installs; the listed template-injection paths do not overlap the two pull_request_target paths, while low-confidence cache-poisoning findings are hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 json5 Version ^2.2.3 | — | — |
lodash Version ^4.18.1 | — | — |
jest-mock Version ^30.0.0 | — | — |
babel-jest Version ^30.0.0 | — | — |
server-only Version ^0.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 9 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.