A Jest preset to painlessly test your Expo / React Native apps.
86%
Total Score
healthy
Frequent releases, active Expo maintenance, and broad contribution outweigh incomplete workflow coverage and weak package-to-repository linkage.
No build attestation or trusted-publisher identity is present, leaving release provenance less transparent despite the package's otherwise strong maintenance evidence.
The package has 13 publishing accounts, but several use consumer or outside domains; the Expo organization backing partly compensates, making this an account-hygiene caution rather than a maintenance-capacity concern.
The linked repository name does not match jest-expo and its README does not mention the package; although an organization monorepo can explain the name mismatch, the package-to-source linkage is less explicit.
The audit analyzed only 30 of 54 workflows, so coverage is incomplete. It found high-confidence template-injection patterns and several adhoc package installs, but no untrusted checkouts or script-injection findings, limiting this to a hygiene caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
json5 Version ^2.2.3 | — | — |
lodash Version ^4.17.19 | — | — |
babel-jest Version ^29.2.1 | — | — |
server-only Version ^0.0.1 | — | — |
@jest/globals Version ^29.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.