[{"id":1341878,"name":"@unimodules/react-native-adapter","ecosystem":"npm","description":"The adapter to use universal modules with the React Native bridge","homepage":"https://github.com/expo/expo/tree/master/packages/@unimodules/react-native-adapter","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","unimodules","adapter"],"namespace":"unimodules","versions_count":43,"first_release_published_at":"2019-03-12T11:41:49.799Z","latest_release_published_at":"2021-09-28T15:15:35.460Z","latest_release_number":"6.5.0","last_synced_at":"2026-08-31T11:08:48.796Z","created_at":"2022-04-08T21:39:39.939Z","updated_at":"2026-08-31T11:08:48.796Z","registry_url":"https://www.npmjs.com/package/@unimodules/react-native-adapter","install_command":"npm install @unimodules/react-native-adapter","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"6.3.9","next":"6.5.0"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T13:48:16.500Z","dependent_packages_count":50,"downloads":781266,"downloads_period":"last-month","dependent_repos_count":96819,"rankings":{"downloads":0.33583949646212635,"dependent_repos_count":0.10006531847027561,"dependent_packages_count":0.5959710718903767,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":0.8783676809114894,"average":0.5054791350345336},"purl":"pkg:npm/%40unimodules/react-native-adapter","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@unimodules/react-native-adapter","docker_dependents_count":17,"docker_downloads_count":9764,"usage_url":"https://repos.ecosyste.ms/usage/npm/@unimodules/react-native-adapter","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@unimodules/react-native-adapter/dependencies","status":"deprecated","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@unimodules%2Freact-native-adapter/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@unimodules%2Freact-native-adapter/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@unimodules%2Freact-native-adapter/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@unimodules%2Freact-native-adapter/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@unimodules%2Freact-native-adapter/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@unimodules%2Freact-native-adapter/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-01T21:01:48.274Z","updated_at":"2026-04-01T21:01:48.274Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-10T11:56:05.476Z","updated_at":"2022-11-10T11:56:05.476Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T11:56:05.496Z","updated_at":"2022-11-10T11:56:05.496Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T11:56:05.519Z","updated_at":"2022-11-10T11:56:05.519Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T11:56:05.576Z","updated_at":"2022-11-10T11:56:05.576Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T11:56:05.586Z","updated_at":"2022-11-10T11:56:05.586Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T11:56:05.590Z","updated_at":"2022-11-10T11:56:05.590Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T11:56:05.599Z","updated_at":"2022-11-10T11:56:05.599Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T11:56:05.636Z","updated_at":"2022-11-10T11:56:05.636Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-08T18:27:42.585Z","updated_at":"2026-08-08T18:27:42.585Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:29:58.370Z","updated_at":"2024-01-27T00:29:58.370Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:18:27.615Z","updated_at":"2024-06-26T18:18:27.615Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695930,"name":"expo-view","ecosystem":"npm","description":"The basic view for Expo apps","homepage":"https://docs.expo.io/versions/latest/sdk/view/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","view"],"namespace":null,"versions_count":1,"first_release_published_at":"2021-02-19T09:21:38.715Z","latest_release_published_at":"2021-02-19T09:21:38.715Z","latest_release_number":"0.0.0","last_synced_at":"2026-08-31T09:59:59.640Z","created_at":"2022-04-09T15:17:37.211Z","updated_at":"2026-08-31T09:59:59.640Z","registry_url":"https://www.npmjs.com/package/expo-view","install_command":"npm install expo-view","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"0.0.0"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T15:35:10.916Z","dependent_packages_count":1,"downloads":6,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":33.16096352083503,"dependent_repos_count":25.32799796580169,"dependent_packages_count":16.223928578504864,"stargazers_count":0.8356756168288121,"forks_count":0.6938190107646072,"average":15.248476938547},"purl":"pkg:npm/expo-view","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-view","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-view","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-view/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-view/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-view/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-view/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-view/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-view/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-view/codemeta","maintainers":[{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T07:20:55.039Z","updated_at":"2022-11-12T07:20:55.039Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":10850183,"name":"@vostmarkh/expo-file-system","ecosystem":"npm","description":"Provides access to the local file system on the device.","homepage":"https://docs.expo.dev/versions/latest/sdk/filesystem/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","file-system","file"],"namespace":"vostmarkh","versions_count":2,"first_release_published_at":"2024-09-01T05:31:21.525Z","latest_release_published_at":"2024-09-05T05:28:17.878Z","latest_release_number":"17.0.3","last_synced_at":"2026-08-31T12:03:29.662Z","created_at":"2024-09-01T05:34:37.374Z","updated_at":"2026-08-31T12:03:29.662Z","registry_url":"https://www.npmjs.com/package/@vostmarkh/expo-file-system","install_command":"npm install @vostmarkh/expo-file-system","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"17.0.3"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-23T10:27:04.647Z","dependent_packages_count":0,"downloads":12,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":25.864033486916956,"dependent_packages_count":37.568396882485544,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":31.716215184701248},"purl":"pkg:npm/%40vostmarkh/expo-file-system","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@vostmarkh/expo-file-system","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@vostmarkh/expo-file-system","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@vostmarkh/expo-file-system/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-22T18:06:09.698Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":660,"past_year_pull_requests_count":1900,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":638702.7996146436,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1038,"past_year_pull_request_authors_count":367,"past_year_issue_authors_count":539,"past_year_avg_comments_per_issue":2.5106060606060607,"past_year_avg_comments_per_pull_request":2.071578947368421,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":813,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@vostmarkh%2Fexpo-file-system/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@vostmarkh%2Fexpo-file-system/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@vostmarkh%2Fexpo-file-system/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@vostmarkh%2Fexpo-file-system/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@vostmarkh%2Fexpo-file-system/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@vostmarkh%2Fexpo-file-system/codemeta","maintainers":[{"uuid":"vostmarkh","login":"vostmarkh","name":null,"email":"igor.khramtsov@proton.me","url":null,"packages_count":2,"html_url":"https://www.npmjs.com/~vostmarkh","role":null,"created_at":"2024-09-01T05:38:28.372Z","updated_at":"2024-09-01T05:38:28.372Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/vostmarkh/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":8624324,"name":"pwc-expo","ecosystem":"npm","description":"The Expo SDK","homepage":"https://github.com/expo/expo/tree/main/packages/expo","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo"],"namespace":null,"versions_count":1,"first_release_published_at":"2023-12-06T14:53:30.483Z","latest_release_published_at":"2023-12-06T14:53:30.483Z","latest_release_number":"49.0.21","last_synced_at":"2026-08-31T09:22:45.715Z","created_at":"2023-12-06T17:17:11.036Z","updated_at":"2026-08-31T09:22:45.715Z","registry_url":"https://www.npmjs.com/package/pwc-expo","install_command":"npm install pwc-expo","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"49.0.21"}},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T17:25:43.302Z","dependent_packages_count":0,"downloads":null,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":36.20805571657756,"dependent_packages_count":51.91899088092996,"stargazers_count":0.597020204203422,"forks_count":0.5272101873782815,"docker_downloads_count":null,"average":22.312819247272305},"purl":"pkg:npm/pwc-expo","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/pwc-expo","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/pwc-expo","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/pwc-expo/dependencies","status":"unpublished","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pwc-expo/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pwc-expo/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pwc-expo/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pwc-expo/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pwc-expo/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pwc-expo/codemeta","maintainers":[{"uuid":"asad-pwc","login":"asad-pwc","name":null,"email":"asad.saleem_externalparties@pwc.com","url":null,"packages_count":6,"html_url":"https://www.npmjs.com/~asad-pwc","role":null,"created_at":"2023-12-06T18:15:59.599Z","updated_at":"2023-12-06T18:15:59.599Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/asad-pwc/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14929382,"name":"github.com/Expo/expo","ecosystem":"go","description":null,"homepage":null,"licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/Expo/expo","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-08-11T23:33:59.000Z","latest_release_published_at":"2026-08-11T23:33:59.000Z","latest_release_number":"v0.0.0-20260811233359-42c88e4f0e92","last_synced_at":"2026-08-31T10:39:54.149Z","created_at":"2026-08-12T00:31:49.142Z","updated_at":"2026-08-31T10:39:54.149Z","registry_url":"https://pkg.go.dev/github.com/Expo/expo","install_command":"go get github.com/Expo/expo","documentation_url":"https://pkg.go.dev/github.com/Expo/expo#section-documentation","metadata":{},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36847332,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-23T10:27:04.819Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.796011385411047,"dependent_packages_count":4.494101325906062,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.6450563556585545},"purl":"pkg:golang/github.com/%21expo/expo","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Expo/expo","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Expo/expo","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Expo/expo/dependencies","status":"removed","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-22T18:06:09.698Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":660,"past_year_pull_requests_count":1900,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":638702.7996146436,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1038,"past_year_pull_request_authors_count":367,"past_year_issue_authors_count":539,"past_year_avg_comments_per_issue":2.5106060606060607,"past_year_avg_comments_per_pull_request":2.071578947368421,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":813,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FExpo%2Fexpo/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FExpo%2Fexpo/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FExpo%2Fexpo/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FExpo%2Fexpo/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FExpo%2Fexpo/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FExpo%2Fexpo/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2282215,"maintainers_count":0,"namespaces_count":839585,"keywords_count":126348,"github":"golang","metadata":{"funded_packages_count":70969,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-02T05:03:03.375Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":1695870,"name":"expo-task-manager-bug-fix","ecosystem":"npm","description":"Expo module that provides support for tasks that can run in the background.","homepage":"https://docs.expo.io/versions/latest/sdk/task-manager/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","react-native","task-manager","task","background"],"namespace":null,"versions_count":2,"first_release_published_at":"2021-08-19T19:45:17.963Z","latest_release_published_at":"2021-08-19T20:06:35.056Z","latest_release_number":"9.2.4","last_synced_at":"2026-08-31T11:03:32.779Z","created_at":"2022-04-09T15:17:34.275Z","updated_at":"2026-08-31T11:03:32.780Z","registry_url":"https://www.npmjs.com/package/expo-task-manager-bug-fix","install_command":"npm install expo-task-manager-bug-fix","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"9.2.4"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2024-04-22T12:25:10.000Z","size":2999444,"stargazers_count":28978,"open_issues_count":670,"forks_count":4626,"subscribers_count":286,"default_branch":"main","last_synced_at":"2024-04-22T12:26:42.119Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2024-04-23T12:41:36.546Z","dependencies_parsed_at":"2024-04-23T12:51:47.000Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":20842,"total_committers":1306,"mean_commits":15.95865237366003,"dds":0.8886863064964975,"last_synced_commit":"18e2e95c53e01de224ecc534467a447c6bd3afd7"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":211565865,"owners_count":15316042,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":405,"last_synced_at":"2024-04-12T10:03:26.593Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/expo","funding_links":[],"total_stars":69025,"followers":1408,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2024-04-12T10:05:06.678Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[]},"repo_metadata_updated_at":"2024-08-30T06:41:31.326Z","dependent_packages_count":1,"downloads":13,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":24.100466736512292,"dependent_repos_count":10.295976646711454,"dependent_packages_count":20.907756255897063,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":11.28536617631875},"purl":"pkg:npm/expo-task-manager-bug-fix","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-task-manager-bug-fix","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-task-manager-bug-fix","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-task-manager-bug-fix/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-08-29T09:39:27.637Z","issues_count":8545,"pull_requests_count":7907,"avg_time_to_close_issue":5679180.833224967,"avg_time_to_close_pull_request":1799015.7243767313,"issues_closed_count":6132,"pull_requests_closed_count":5776,"pull_request_authors_count":567,"issue_authors_count":2589,"avg_comments_per_issue":6.4628437682855475,"avg_comments_per_pull_request":1.1021879347413683,"merged_pull_requests_count":5152,"bot_issues_count":0,"bot_pull_requests_count":117,"past_year_issues_count":5183,"past_year_pull_requests_count":6600,"past_year_avg_time_to_close_issue":1078242.344530321,"past_year_avg_time_to_close_pull_request":432270.9578904334,"past_year_issues_closed_count":3357,"past_year_pull_requests_closed_count":4892,"past_year_pull_request_authors_count":445,"past_year_issue_authors_count":1692,"past_year_avg_comments_per_issue":3.0007717538105343,"past_year_avg_comments_per_pull_request":1.0134848484848484,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":92,"past_year_merged_pull_requests_count":4495,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":797,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":497,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"byCedric","count":464,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"Simek","count":377,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"tsapeta","count":373,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":281,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":145,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":109,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":67,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"ide","count":37,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"szdziedzic","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"kbrandwijk","count":19,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"kitten","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"betomoedano","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"tchayen","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"}],"active_maintainers":[{"login":"amandeepmittal","count":716,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":454,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":414,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"wschurman","count":403,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"Simek","count":354,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"tsapeta","count":305,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":265,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":131,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":81,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":56,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":37,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"szdziedzic","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"ide","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"kitten","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"kbrandwijk","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"betomoedano","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"tchayen","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-task-manager-bug-fix/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-task-manager-bug-fix/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-task-manager-bug-fix/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-task-manager-bug-fix/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-task-manager-bug-fix/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-task-manager-bug-fix/codemeta","maintainers":[{"uuid":"iannortnau","login":"iannortnau","name":null,"email":"ortnau.iann@gmail.com","url":null,"packages_count":4,"html_url":"https://www.npmjs.com/~iannortnau","role":null,"created_at":"2022-11-12T07:20:57.599Z","updated_at":"2022-11-12T07:20:57.599Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/iannortnau/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":5108378,"name":"eslint-plugin-expo","ecosystem":"npm","description":"ESLint rules for Expo apps","homepage":"https://github.com/expo/expo#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["eslint","eslint-plugin","eslintplugin"],"namespace":null,"versions_count":141,"first_release_published_at":"2022-07-30T09:28:41.060Z","latest_release_published_at":"2026-06-25T19:35:31.373Z","latest_release_number":"1.1.0","last_synced_at":"2026-09-02T09:35:52.181Z","created_at":"2022-07-30T09:33:33.649Z","updated_at":"2026-09-02T09:35:52.182Z","registry_url":"https://www.npmjs.com/package/eslint-plugin-expo","install_command":"npm install eslint-plugin-expo","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-51":"0.0.1","canary-sdk-55":"1.0.1-canary-20260429-a5e59cf","next":"1.1.0","latest":"1.1.0","canary-sdk-56":"2.0.0-canary-20260701-9100865","canary":"2.0.0-canary-20260902-26df09e"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2024-04-22T12:25:10.000Z","size":2999444,"stargazers_count":28978,"open_issues_count":670,"forks_count":4626,"subscribers_count":286,"default_branch":"main","last_synced_at":"2024-04-22T12:26:42.119Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2024-04-23T12:41:36.546Z","dependencies_parsed_at":"2024-04-23T12:51:47.000Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":20842,"total_committers":1306,"mean_commits":15.95865237366003,"dds":0.8886863064964975,"last_synced_commit":"18e2e95c53e01de224ecc534467a447c6bd3afd7"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":211565865,"owners_count":15316042,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":405,"last_synced_at":"2024-04-12T10:03:26.593Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/expo","funding_links":[],"total_stars":69025,"followers":1408,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2024-04-12T10:05:06.678Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[]},"repo_metadata_updated_at":"2024-09-05T00:11:06.170Z","dependent_packages_count":2,"downloads":9202798,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":18.593470278473003,"dependent_repos_count":10.358016171268641,"dependent_packages_count":8.869624249465728,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":12.60703689973579},"purl":"pkg:npm/eslint-plugin-expo","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/eslint-plugin-expo","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/eslint-plugin-expo","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/eslint-plugin-expo/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-09-04T14:04:40.928Z","issues_count":8584,"pull_requests_count":7968,"avg_time_to_close_issue":5650395.849339349,"avg_time_to_close_pull_request":1792528.8523156089,"issues_closed_count":6186,"pull_requests_closed_count":5830,"pull_request_authors_count":575,"issue_authors_count":2617,"avg_comments_per_issue":6.466449207828518,"avg_comments_per_pull_request":1.1034136546184738,"merged_pull_requests_count":5203,"bot_issues_count":0,"bot_pull_requests_count":117,"past_year_issues_count":4882,"past_year_pull_requests_count":6275,"past_year_avg_time_to_close_issue":1100168.2422069826,"past_year_avg_time_to_close_pull_request":446181.60532431863,"past_year_issues_closed_count":3201,"past_year_pull_requests_closed_count":4733,"past_year_pull_request_authors_count":445,"past_year_issue_authors_count":1694,"past_year_avg_comments_per_issue":3.0616550594018843,"past_year_avg_comments_per_pull_request":1.0479681274900399,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":85,"past_year_merged_pull_requests_count":4350,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":806,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":498,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"byCedric","count":468,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"Simek","count":379,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"tsapeta","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":285,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":148,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":109,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":67,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"ide","count":37,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"szdziedzic","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"kbrandwijk","count":19,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"kitten","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"betomoedano","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"tchayen","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"}],"active_maintainers":[{"login":"amandeepmittal","count":703,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":434,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":418,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"wschurman","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"Simek","count":342,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"tsapeta","count":303,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":249,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":134,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":81,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":56,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":37,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"szdziedzic","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"ide","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"kitten","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"kbrandwijk","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"betomoedano","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"tchayen","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-plugin-expo/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-plugin-expo/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-plugin-expo/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-plugin-expo/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-plugin-expo/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-plugin-expo/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T16:00:56.684Z","updated_at":"2026-04-02T16:00:56.684Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T15:00:54.367Z","updated_at":"2026-02-25T15:00:54.367Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2024-03-26T22:44:06.411Z","updated_at":"2024-03-26T22:44:06.411Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2024-03-20T16:35:14.231Z","updated_at":"2024-03-20T16:35:14.231Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2024-03-26T22:44:06.537Z","updated_at":"2024-03-26T22:44:06.537Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2024-03-26T22:44:06.634Z","updated_at":"2024-03-26T22:44:06.634Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2024-03-26T22:44:06.676Z","updated_at":"2024-03-26T22:44:06.676Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-16T03:35:27.995Z","updated_at":"2022-11-16T03:35:27.995Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2024-03-26T22:44:06.906Z","updated_at":"2024-03-26T22:44:06.906Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T13:59:40.656Z","updated_at":"2026-08-06T13:59:40.656Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-03-26T22:44:05.814Z","updated_at":"2024-03-26T22:44:05.814Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:18:57.315Z","updated_at":"2024-06-26T18:18:57.315Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":6451374,"name":"@jseda/expo-camera","ecosystem":"npm","description":"A React component that renders a preview for the device's either front or back camera. Camera's parameters like zoom, auto focus, white balance and flash mode are adjustable. With expo-camera, one can also take photos and record videos that are saved to t","homepage":"https://docs.expo.dev/versions/latest/sdk/camera/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","camera"],"namespace":"jseda","versions_count":1,"first_release_published_at":"2023-03-01T08:38:08.170Z","latest_release_published_at":"2023-03-01T08:38:08.170Z","latest_release_number":"13.2.1","last_synced_at":"2026-08-31T10:06:59.446Z","created_at":"2023-03-01T10:09:29.077Z","updated_at":"2026-08-31T10:06:59.446Z","registry_url":"https://www.npmjs.com/package/@jseda/expo-camera","install_command":"npm install @jseda/expo-camera","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"13.2.1"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-29T23:55:43.325Z","dependent_packages_count":0,"downloads":9,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":17.473978671623662,"dependent_repos_count":25.30552159382132,"dependent_packages_count":32.889739249478886,"stargazers_count":0.86891444452233,"forks_count":0.7289678007265351,"average":15.45342435203455},"purl":"pkg:npm/%40jseda/expo-camera","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@jseda/expo-camera","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@jseda/expo-camera","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@jseda/expo-camera/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-29T11:47:15.798Z","issues_count":7173,"pull_requests_count":16787,"avg_time_to_close_issue":4984450.26026216,"avg_time_to_close_pull_request":1687856.7081740664,"issues_closed_count":5796,"pull_requests_closed_count":13604,"pull_request_authors_count":1494,"issue_authors_count":4942,"avg_comments_per_issue":4.503694409591524,"avg_comments_per_pull_request":1.6120807767915648,"merged_pull_requests_count":11855,"bot_issues_count":1,"bot_pull_requests_count":220,"past_year_issues_count":679,"past_year_pull_requests_count":1982,"past_year_avg_time_to_close_issue":1412504.5333333334,"past_year_avg_time_to_close_pull_request":721037.1230342275,"past_year_issues_closed_count":390,"past_year_pull_requests_closed_count":1081,"past_year_pull_request_authors_count":391,"past_year_issue_authors_count":549,"past_year_avg_comments_per_issue":2.6318114874815906,"past_year_avg_comments_per_pull_request":2.213420787083754,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":40,"past_year_merged_pull_requests_count":845,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":552,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":161,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"expo-bot","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":193,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":93,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"hirbod","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@jseda%2Fexpo-camera/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@jseda%2Fexpo-camera/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@jseda%2Fexpo-camera/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@jseda%2Fexpo-camera/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@jseda%2Fexpo-camera/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@jseda%2Fexpo-camera/codemeta","maintainers":[{"uuid":"jseda","login":"jseda","name":null,"email":"jseda@spork.tech","url":null,"packages_count":2,"html_url":"https://www.npmjs.com/~jseda","role":null,"created_at":"2023-03-01T10:54:35.606Z","updated_at":"2023-03-01T10:54:35.606Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/jseda/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":11288312,"name":"expo-background-task","ecosystem":"npm","description":"Expo Android and iOS module for Background Task APIs","homepage":"https://docs.expo.dev/versions/latest/sdk/background-task/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","react-native","background","background-task"],"namespace":null,"versions_count":195,"first_release_published_at":"2025-01-21T22:07:01.253Z","latest_release_published_at":"2026-09-01T16:17:11.004Z","latest_release_number":"57.0.15","last_synced_at":"2026-09-01T16:17:33.270Z","created_at":"2025-01-21T22:19:57.596Z","updated_at":"2026-09-01T16:17:33.270Z","registry_url":"https://www.npmjs.com/package/expo-background-task","install_command":"npm install expo-background-task","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-52":"0.1.5","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.16-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.22","latest":"57.0.14","next":"57.0.15","sdk-56":"56.0.27"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T05:47:53.344Z","dependent_packages_count":0,"downloads":1266381,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":25.173926542746983,"dependent_packages_count":36.41561469244547,"stargazers_count":0.374462064346719,"forks_count":0.3526213795024137,"docker_downloads_count":null,"average":15.579156169760397},"purl":"pkg:npm/expo-background-task","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-background-task","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-background-task","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-background-task/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-task/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-task/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-task/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-task/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-task/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-task/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T16:00:13.370Z","updated_at":"2026-04-02T16:00:13.370Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-03-07T07:23:50.906Z","updated_at":"2026-03-07T07:23:50.906Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2025-01-27T19:45:16.794Z","updated_at":"2025-01-27T19:45:16.794Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2025-01-21T22:19:58.423Z","updated_at":"2025-01-21T22:19:58.423Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2025-01-27T19:45:17.354Z","updated_at":"2025-01-27T19:45:17.354Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2025-01-27T19:45:17.562Z","updated_at":"2025-01-27T19:45:17.562Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T19:10:12.808Z","updated_at":"2025-09-20T19:10:12.808Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2025-01-27T19:45:17.800Z","updated_at":"2025-01-27T19:45:17.800Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2025-01-27T19:45:18.626Z","updated_at":"2025-01-27T19:45:18.626Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T11:23:28.428Z","updated_at":"2026-08-06T11:23:28.428Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2025-01-27T19:45:18.908Z","updated_at":"2025-01-27T19:45:18.908Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2025-01-27T19:45:21.286Z","updated_at":"2025-01-27T19:45:21.286Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695789,"name":"expo-processing","ecosystem":"npm","description":"Utilities for using Processing.js on Expo","homepage":"https://github.com/expo/expo/tree/main/packages/expo-processing","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","processing.js","graphics","opengl","gl"],"namespace":null,"versions_count":247,"first_release_published_at":"2023-11-23T16:17:25.000Z","latest_release_published_at":"2026-09-01T16:17:19.043Z","latest_release_number":"57.0.16","last_synced_at":"2026-09-01T16:19:36.070Z","created_at":"2022-04-09T15:17:30.468Z","updated_at":"2026-09-01T16:19:36.070Z","registry_url":"https://www.npmjs.com/package/expo-processing","install_command":"npm install expo-processing","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"2.3.5","sdk-51":"2.3.7","canary-sdk-55":"55.0.7-canary-20260429-a5e59cf","canary":"57.0.0-canary-20260623-1c70a78","canary-sdk-56":"56.0.15-canary-20260624-9d83b81","sdk-55":"55.0.14","next":"57.0.16","latest":"57.0.15","sdk-56":"56.0.25"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2024-04-22T12:25:10.000Z","size":2999444,"stargazers_count":28978,"open_issues_count":670,"forks_count":4626,"subscribers_count":286,"default_branch":"main","last_synced_at":"2024-04-22T12:26:42.119Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2024-04-23T12:41:36.546Z","dependencies_parsed_at":"2024-04-23T12:51:47.000Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":20842,"total_committers":1306,"mean_commits":15.95865237366003,"dds":0.8886863064964975,"last_synced_commit":"18e2e95c53e01de224ecc534467a447c6bd3afd7"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":211565865,"owners_count":15316042,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":405,"last_synced_at":"2024-04-12T10:03:26.593Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/expo","funding_links":[],"total_stars":69025,"followers":1408,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2024-04-12T10:05:06.678Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[]},"repo_metadata_updated_at":"2024-09-05T00:09:42.508Z","dependent_packages_count":2,"downloads":2931,"downloads_period":"last-month","dependent_repos_count":32,"rankings":{"downloads":8.762664556254524,"dependent_repos_count":2.3292266863937465,"dependent_packages_count":8.786228889746779,"stargazers_count":0.603759504619969,"forks_count":0.5494001643716063,"docker_downloads_count":null,"average":4.206255960277325},"purl":"pkg:npm/expo-processing","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-processing","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-processing","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-processing/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-09-04T14:04:40.928Z","issues_count":8584,"pull_requests_count":7968,"avg_time_to_close_issue":5650395.849339349,"avg_time_to_close_pull_request":1792528.8523156089,"issues_closed_count":6186,"pull_requests_closed_count":5830,"pull_request_authors_count":575,"issue_authors_count":2617,"avg_comments_per_issue":6.466449207828518,"avg_comments_per_pull_request":1.1034136546184738,"merged_pull_requests_count":5203,"bot_issues_count":0,"bot_pull_requests_count":117,"past_year_issues_count":4882,"past_year_pull_requests_count":6275,"past_year_avg_time_to_close_issue":1100168.2422069826,"past_year_avg_time_to_close_pull_request":446181.60532431863,"past_year_issues_closed_count":3201,"past_year_pull_requests_closed_count":4733,"past_year_pull_request_authors_count":445,"past_year_issue_authors_count":1694,"past_year_avg_comments_per_issue":3.0616550594018843,"past_year_avg_comments_per_pull_request":1.0479681274900399,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":85,"past_year_merged_pull_requests_count":4350,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":806,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":498,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"byCedric","count":468,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"Simek","count":379,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"tsapeta","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":285,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":148,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":109,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":67,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"ide","count":37,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"szdziedzic","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"kbrandwijk","count":19,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"kitten","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"betomoedano","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"tchayen","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"}],"active_maintainers":[{"login":"amandeepmittal","count":703,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":434,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":418,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"wschurman","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"Simek","count":342,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"tsapeta","count":303,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":249,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":134,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":81,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":56,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":37,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"szdziedzic","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"ide","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"kitten","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"kbrandwijk","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"betomoedano","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"tchayen","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-processing/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-processing/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-processing/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-processing/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-processing/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-processing/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-01T21:02:39.165Z","updated_at":"2026-04-01T21:02:39.165Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T15:01:47.865Z","updated_at":"2026-02-25T15:01:47.865Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T07:20:54.060Z","updated_at":"2022-11-12T07:20:54.060Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T07:20:54.155Z","updated_at":"2022-11-12T07:20:54.155Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T07:20:54.331Z","updated_at":"2022-11-12T07:20:54.331Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T07:20:54.529Z","updated_at":"2022-11-12T07:20:54.529Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-12T07:20:54.584Z","updated_at":"2022-11-12T07:20:54.584Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T07:20:54.634Z","updated_at":"2022-11-12T07:20:54.634Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T07:20:54.835Z","updated_at":"2022-11-12T07:20:54.835Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T11:23:38.670Z","updated_at":"2026-08-06T11:23:38.670Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-26T02:14:10.218Z","updated_at":"2024-08-26T02:14:10.218Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-26T02:14:09.826Z","updated_at":"2024-08-26T02:14:09.826Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":12147430,"name":"@amazon-devices/expo-linking","ecosystem":"npm","description":"Create and open deep links universally","homepage":"https://docs.expo.dev/versions/latest/sdk/linking","licenses":"See license in LICENSE","normalized_licenses":["ICU"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-linking"],"namespace":"amazon-devices","versions_count":3,"first_release_published_at":"2025-09-25T06:08:34.325Z","latest_release_published_at":"2026-08-06T19:33:29.956Z","latest_release_number":"3.0.0","last_synced_at":"2026-08-31T09:30:04.112Z","created_at":"2025-09-27T01:10:28.741Z","updated_at":"2026-08-31T09:30:04.113Z","registry_url":"https://www.npmjs.com/package/@amazon-devices/expo-linking","install_command":"npm install @amazon-devices/expo-linking","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"3.0.0","last_published":"3.0.0"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T20:43:55.129Z","dependent_packages_count":0,"downloads":355,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":23.77675833565872,"dependent_packages_count":34.29845074057793,"stargazers_count":0.3312843443813799,"forks_count":0.2996217355569158,"docker_downloads_count":null,"average":14.676528789043736},"purl":"pkg:npm/%40amazon-devices/expo-linking","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@amazon-devices/expo-linking","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@amazon-devices/expo-linking","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@amazon-devices/expo-linking/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-22T18:06:09.698Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":660,"past_year_pull_requests_count":1900,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":638702.7996146436,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1038,"past_year_pull_request_authors_count":367,"past_year_issue_authors_count":539,"past_year_avg_comments_per_issue":2.5106060606060607,"past_year_avg_comments_per_pull_request":2.071578947368421,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":813,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@amazon-devices%2Fexpo-linking/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@amazon-devices%2Fexpo-linking/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@amazon-devices%2Fexpo-linking/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@amazon-devices%2Fexpo-linking/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@amazon-devices%2Fexpo-linking/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@amazon-devices%2Fexpo-linking/codemeta","maintainers":[{"uuid":"amazon-devices-admin","login":"amazon-devices-admin","name":null,"email":"amazon-devices-npm-admin@amazon.com","url":null,"packages_count":119,"html_url":"https://www.npmjs.com/~amazon-devices-admin","role":null,"created_at":"2025-10-08T16:44:23.307Z","updated_at":"2025-10-08T16:44:23.307Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/amazon-devices-admin/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":5240271,"name":"expo-router","ecosystem":"npm","description":"Expo Router is a file-based router for React Native and web applications.","homepage":"https://docs.expo.dev/routing/introduction/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo"],"namespace":null,"versions_count":489,"first_release_published_at":"2023-11-23T16:17:36.309Z","latest_release_published_at":"2026-09-01T16:18:17.250Z","latest_release_number":"57.0.18","last_synced_at":"2026-09-01T16:20:20.748Z","created_at":"2022-09-11T01:56:33.184Z","updated_at":"2026-09-01T16:20:20.749Z","registry_url":"https://www.npmjs.com/package/expo-router","install_command":"npm install expo-router","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"3.4.8","sdk-52-router-patches":"5.0.0-sdk-52-router-patches","sdk-52":"4.0.22","sdk-53":"5.1.11","canary-sdk-55":"55.0.3-canary-20260429-a5e59cf","sdk-54":"6.0.24","canary-sdk-56":"56.2.8-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.18","next":"57.0.18","latest":"57.0.17","sdk-56":"56.2.20"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T03:22:28.449Z","dependent_packages_count":26,"downloads":21975564,"downloads_period":"last-month","dependent_repos_count":2117,"rankings":{"downloads":0.5792855420845486,"dependent_repos_count":0.48266043466165776,"dependent_packages_count":2.7080444545623874,"stargazers_count":2.267029371443579,"forks_count":2.9252612394694415,"docker_downloads_count":null,"average":1.7924562084443227},"purl":"pkg:npm/expo-router","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-router","docker_dependents_count":1,"docker_downloads_count":60,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-router","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-router/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-router/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-router/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-router/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-router/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-router/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-router/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-05-14T00:06:03.602Z","updated_at":"2026-05-14T00:06:03.602Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T20:30:38.129Z","updated_at":"2026-02-25T20:30:38.129Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2023-08-05T02:55:08.554Z","updated_at":"2023-08-05T02:55:08.554Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2023-08-02T21:30:11.689Z","updated_at":"2023-08-02T21:30:11.689Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2023-08-05T02:55:08.755Z","updated_at":"2023-08-05T02:55:08.755Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2023-08-05T02:55:08.837Z","updated_at":"2023-08-05T02:55:08.837Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2023-08-05T02:55:08.865Z","updated_at":"2023-08-05T02:55:08.865Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2023-08-05T02:55:08.939Z","updated_at":"2023-08-05T02:55:08.939Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2023-08-05T02:55:09.131Z","updated_at":"2023-08-05T02:55:09.131Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-14T14:56:28.443Z","updated_at":"2026-08-14T14:56:28.443Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-20T14:08:34.875Z","updated_at":"2024-08-20T14:08:34.875Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-20T14:08:34.316Z","updated_at":"2024-08-20T14:08:34.316Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1455214,"name":"babel-preset-expo","ecosystem":"npm","description":"The Babel preset for Expo projects","homepage":"https://github.com/expo/expo/tree/main/packages/babel-preset-expo#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["babel","babel-preset","expo","expo-web","react-native","react-native-web","metro","webpack"],"namespace":null,"versions_count":333,"first_release_published_at":"2023-11-22T12:56:34.946Z","latest_release_published_at":"2026-09-01T16:20:19.497Z","latest_release_number":"57.0.10","last_synced_at":"2026-09-01T16:21:19.158Z","created_at":"2022-04-09T01:47:37.869Z","updated_at":"2026-09-01T16:21:19.159Z","registry_url":"https://www.npmjs.com/package/babel-preset-expo","install_command":"npm install babel-preset-expo","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"10.0.1","sdk-51":"11.0.6","sdk-53":"13.2.5","sdk-52":"12.0.12","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.14-canary-20260701-9100865","sdk-54":"54.0.12","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.25","next":"57.0.10","latest":"57.0.9","sdk-56":"56.0.20"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T12:15:18.188Z","dependent_packages_count":930,"downloads":34233554,"downloads_period":"last-month","dependent_repos_count":160583,"rankings":{"downloads":0.21114208385283156,"dependent_repos_count":0.08686479579301984,"dependent_packages_count":0.07315675869279077,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":0.8433614808220748,"average":0.395376239392891},"purl":"pkg:npm/babel-preset-expo","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/babel-preset-expo","docker_dependents_count":49,"docker_downloads_count":177380,"usage_url":"https://repos.ecosyste.ms/usage/npm/babel-preset-expo","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/babel-preset-expo/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/babel-preset-expo/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/babel-preset-expo/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/babel-preset-expo/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/babel-preset-expo/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/babel-preset-expo/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/babel-preset-expo/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T16:01:11.773Z","updated_at":"2026-04-02T16:01:11.773Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T20:30:31.936Z","updated_at":"2026-02-25T20:30:31.936Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T11:21:58.857Z","updated_at":"2022-11-10T11:21:58.857Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T11:21:58.912Z","updated_at":"2022-11-10T11:21:58.912Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T11:21:58.925Z","updated_at":"2022-11-10T11:21:58.925Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T11:21:58.938Z","updated_at":"2022-11-10T11:21:58.938Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T01:21:43.271Z","updated_at":"2025-09-20T01:21:43.271Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T11:21:58.948Z","updated_at":"2022-11-10T11:21:58.948Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T11:21:58.999Z","updated_at":"2022-11-10T11:21:58.999Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T12:00:18.814Z","updated_at":"2026-08-01T12:00:18.814Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-02-05T06:49:29.256Z","updated_at":"2024-02-05T06:49:29.256Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:18:21.818Z","updated_at":"2024-06-26T18:18:21.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":11288311,"name":"@expo/ui","ecosystem":"npm","description":"A collection of UI components","homepage":"https://docs.expo.dev/versions/latest/sdk/ui/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react","react-native","expo","UI components","SwiftUI","Jetpack Compose","cross platform","web","universal"],"namespace":"expo","versions_count":216,"first_release_published_at":"2025-01-21T22:06:42.287Z","latest_release_published_at":"2026-09-01T16:20:06.580Z","latest_release_number":"57.0.15","last_synced_at":"2026-09-01T16:25:51.997Z","created_at":"2025-01-21T22:18:24.330Z","updated_at":"2026-09-01T16:25:51.997Z","registry_url":"https://www.npmjs.com/package/@expo/ui","install_command":"npm install @expo/ui","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"canary-sdk-55":"55.0.2-canary-20260429-a5e59cf","sdk-55":"55.0.17","canary-sdk-56":"56.0.15-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-56":"56.0.26","next":"57.0.15","latest":"57.0.14"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-27T14:43:16.145Z","dependent_packages_count":0,"downloads":10432967,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":25.173926542746983,"dependent_packages_count":36.41561469244547,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":30.794770617596228},"purl":"pkg:npm/%40expo/ui","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@expo/ui","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@expo/ui","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@expo/ui/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T13:00:32.579Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":680,"past_year_pull_requests_count":1970,"past_year_avg_time_to_close_issue":1412298.4398976981,"past_year_avg_time_to_close_pull_request":727374.2809917355,"past_year_issues_closed_count":391,"past_year_pull_requests_closed_count":1089,"past_year_pull_request_authors_count":387,"past_year_issue_authors_count":551,"past_year_avg_comments_per_issue":2.6220588235294118,"past_year_avg_comments_per_pull_request":2.1954314720812182,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":848,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fui/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fui/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fui/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fui/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fui/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fui/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-01T21:01:54.451Z","updated_at":"2026-04-01T21:01:54.451Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T15:00:54.105Z","updated_at":"2026-02-25T15:00:54.105Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2025-01-21T22:19:05.654Z","updated_at":"2025-01-21T22:19:05.654Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2025-01-21T22:19:06.017Z","updated_at":"2025-01-21T22:19:06.017Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2025-01-21T22:19:07.014Z","updated_at":"2025-01-21T22:19:07.014Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2025-01-21T22:19:07.550Z","updated_at":"2025-01-21T22:19:07.550Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-23T17:53:35.352Z","updated_at":"2025-09-23T17:53:35.352Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2025-01-21T22:19:08.124Z","updated_at":"2025-01-21T22:19:08.124Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2025-01-21T22:19:09.510Z","updated_at":"2025-01-21T22:19:09.510Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-05T23:32:43.094Z","updated_at":"2026-08-05T23:32:43.094Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2025-01-21T22:19:10.055Z","updated_at":"2025-01-21T22:19:10.055Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2025-01-21T22:19:12.311Z","updated_at":"2025-01-21T22:19:12.311Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":2265369,"name":"react-native-web-local-authentication","ecosystem":"npm","description":"web shim for native API to unlock your device","homepage":"https://docs.expo.io/versions/latest/sdk/local-authentication/","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native-local-authentication","expo-local-authentication","code","native","react","react-native","react-native-web","expo","expo-web","official"],"namespace":null,"versions_count":1,"first_release_published_at":"2019-12-13T15:44:34.577Z","latest_release_published_at":"2019-12-13T15:44:34.577Z","latest_release_number":"0.0.0-alpha.1","last_synced_at":"2026-08-31T10:11:18.308Z","created_at":"2022-04-09T23:20:10.832Z","updated_at":"2026-08-31T10:11:18.308Z","registry_url":"https://www.npmjs.com/package/react-native-web-local-authentication","install_command":"npm install react-native-web-local-authentication","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"0.0.0-alpha.1"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T20:43:55.235Z","dependent_packages_count":2,"downloads":7,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":45.76322889354142,"dependent_repos_count":25.32799796580169,"dependent_packages_count":9.4821380216761,"stargazers_count":0.8342749218550256,"forks_count":0.6927892188801558,"average":16.42008580435088},"purl":"pkg:npm/react-native-web-local-authentication","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/react-native-web-local-authentication","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/react-native-web-local-authentication","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/react-native-web-local-authentication/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-22T18:06:09.698Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":660,"past_year_pull_requests_count":1900,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":638702.7996146436,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1038,"past_year_pull_request_authors_count":367,"past_year_issue_authors_count":539,"past_year_avg_comments_per_issue":2.5106060606060607,"past_year_avg_comments_per_pull_request":2.071578947368421,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":813,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-local-authentication/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-local-authentication/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-local-authentication/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-local-authentication/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-local-authentication/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-local-authentication/codemeta","maintainers":[{"uuid":"evanbacon","login":"evanbacon","name":null,"email":"baconbrix@gmail.com","url":null,"packages_count":294,"html_url":"https://www.npmjs.com/~evanbacon","role":null,"created_at":"2022-11-14T03:40:16.047Z","updated_at":"2022-11-14T03:40:16.047Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/evanbacon/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":12382817,"name":"expo-observe","ecosystem":"npm","description":"Expo module that dispatches collected app metrics to EAS Observe","homepage":"https://docs.expo.dev/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-observe","ExpoObserve","EAS","observe","observability"],"namespace":null,"versions_count":96,"first_release_published_at":"2025-10-14T07:28:12.012Z","latest_release_published_at":"2026-09-01T16:17:22.373Z","latest_release_number":"57.0.18","last_synced_at":"2026-09-01T16:22:43.985Z","created_at":"2025-10-14T07:28:15.457Z","updated_at":"2026-09-01T16:22:43.986Z","registry_url":"https://www.npmjs.com/package/expo-observe","install_command":"npm install expo-observe","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"canary-sdk-55":"0.1.10-canary-20260429-a5e59cf","canary-sdk-56":"56.0.17-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"0.2.6","next":"57.0.18","latest":"57.0.17","sdk-56":"56.0.29"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T19:35:28.892Z","dependent_packages_count":0,"downloads":703402,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":23.675632306588998,"dependent_packages_count":34.15188569316107,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":28.913758999875036},"purl":"pkg:npm/expo-observe","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-observe","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-observe","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-observe/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-observe/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-observe/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-observe/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-observe/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-observe/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-observe/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-17T17:01:32.841Z","updated_at":"2026-04-17T17:01:32.841Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2025-10-14T07:40:18.505Z","updated_at":"2025-10-14T07:40:18.505Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2026-04-17T17:01:32.145Z","updated_at":"2026-04-17T17:01:32.145Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2026-04-17T17:01:32.201Z","updated_at":"2026-04-17T17:01:32.201Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2026-04-17T17:01:32.509Z","updated_at":"2026-04-17T17:01:32.509Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2026-04-17T17:01:32.566Z","updated_at":"2026-04-17T17:01:32.566Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2026-04-17T17:01:32.881Z","updated_at":"2026-04-17T17:01:32.881Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2026-04-17T17:01:32.613Z","updated_at":"2026-04-17T17:01:32.613Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2026-04-17T17:01:32.668Z","updated_at":"2026-04-17T17:01:32.668Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T11:23:38.682Z","updated_at":"2026-08-06T11:23:38.682Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2026-04-17T17:01:32.726Z","updated_at":"2026-04-17T17:01:32.726Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2026-04-17T17:01:32.792Z","updated_at":"2026-04-17T17:01:32.792Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695743,"name":"expo-module-template","ecosystem":"npm","description":"ExpoModuleTemplate standalone module","homepage":"https://docs.expo.dev/modules","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-module-template"],"namespace":null,"versions_count":364,"first_release_published_at":"2023-11-23T16:16:44.706Z","latest_release_published_at":"2026-09-01T16:15:27.379Z","latest_release_number":"57.0.10","last_synced_at":"2026-09-01T16:25:00.987Z","created_at":"2022-04-09T15:17:28.096Z","updated_at":"2026-09-01T16:25:00.987Z","registry_url":"https://www.npmjs.com/package/expo-module-template","install_command":"npm install expo-module-template","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"10.13.1","sdk-51":"10.14.7","sdk-54":"11.0.19","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.12-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.24","latest":"57.0.9","next":"57.0.10","sdk-56":"56.0.19"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T18:43:27.554Z","dependent_packages_count":1,"downloads":13014,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":4.069922827168377,"dependent_repos_count":10.767935900085632,"dependent_packages_count":21.30988168970035,"stargazers_count":0.603759504619969,"forks_count":0.5494001643716063,"docker_downloads_count":null,"average":7.460180017189186},"purl":"pkg:npm/expo-module-template","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-module-template","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-module-template","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-module-template/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-22T18:06:09.698Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":660,"past_year_pull_requests_count":1900,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":638702.7996146436,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1038,"past_year_pull_request_authors_count":367,"past_year_issue_authors_count":539,"past_year_avg_comments_per_issue":2.5106060606060607,"past_year_avg_comments_per_pull_request":2.071578947368421,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":813,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-module-template/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-module-template/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-module-template/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-module-template/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-module-template/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-module-template/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-10T20:40:37.545Z","updated_at":"2026-04-10T20:40:37.545Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-08T07:54:15.611Z","updated_at":"2022-11-08T07:54:15.611Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T07:54:15.873Z","updated_at":"2022-11-08T07:54:15.873Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T07:54:16.134Z","updated_at":"2022-11-08T07:54:16.134Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T07:54:16.265Z","updated_at":"2022-11-08T07:54:16.265Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T07:54:16.347Z","updated_at":"2022-11-08T07:54:16.347Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-08T07:54:16.356Z","updated_at":"2022-11-08T07:54:16.356Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T07:54:16.362Z","updated_at":"2022-11-08T07:54:16.362Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T07:54:16.446Z","updated_at":"2022-11-08T07:54:16.446Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2022-11-08T07:54:16.453Z","updated_at":"2022-11-08T07:54:16.453Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-26T02:14:10.298Z","updated_at":"2024-08-26T02:14:10.298Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-26T02:14:10.219Z","updated_at":"2024-08-26T02:14:10.219Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695520,"name":"expo-background-fetch","ecosystem":"npm","description":"Expo universal module for BackgroundFetch API","homepage":"https://docs.expo.dev/versions/latest/sdk/background-fetch/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","react-native","fetch","background","background-fetch"],"namespace":null,"versions_count":282,"first_release_published_at":"2023-11-23T16:13:12.941Z","latest_release_published_at":"2026-09-01T16:17:13.956Z","latest_release_number":"57.0.15","last_synced_at":"2026-09-01T16:17:42.746Z","created_at":"2022-04-09T15:17:15.652Z","updated_at":"2026-09-02T12:28:48.941Z","registry_url":"https://www.npmjs.com/package/expo-background-fetch","install_command":"npm install expo-background-fetch","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"11.8.1","sdk-51":"12.0.1","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.16-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.20","latest":"57.0.14","next":"57.0.15","sdk-56":"56.0.27"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T12:28:48.941Z","dependent_packages_count":13,"downloads":466358,"downloads_period":"last-month","dependent_repos_count":8309,"rankings":{"downloads":0.9883701388188633,"dependent_repos_count":0.2681802745296267,"dependent_packages_count":1.6674475587966937,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":0.7731672884945043,"average":0.8032994171854368},"purl":"pkg:npm/expo-background-fetch","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-background-fetch","docker_dependents_count":1,"docker_downloads_count":4065,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-background-fetch","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-background-fetch/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-02T09:00:15.712Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2334,"past_year_pull_requests_count":7985,"past_year_avg_time_to_close_issue":1617883.2351555137,"past_year_avg_time_to_close_pull_request":758908.2499658517,"past_year_issues_closed_count":2122,"past_year_pull_requests_closed_count":7321,"past_year_pull_request_authors_count":1007,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.8933161953727504,"past_year_avg_comments_per_pull_request":2.1552911709455227,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6121,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":870,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":595,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-fetch/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-fetch/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-fetch/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-fetch/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-fetch/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-background-fetch/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T14:01:01.101Z","updated_at":"2026-04-02T14:01:01.101Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-11T01:29:20.713Z","updated_at":"2022-11-11T01:29:20.713Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-11T01:29:20.769Z","updated_at":"2022-11-11T01:29:20.769Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-11T01:29:20.864Z","updated_at":"2022-11-11T01:29:20.864Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-11T01:29:20.887Z","updated_at":"2022-11-11T01:29:20.887Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-11T01:29:20.912Z","updated_at":"2022-11-11T01:29:20.912Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-11T01:29:20.921Z","updated_at":"2022-11-11T01:29:20.921Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-11T01:29:20.932Z","updated_at":"2022-11-11T01:29:20.932Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-11T01:29:20.961Z","updated_at":"2022-11-11T01:29:20.961Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T10:09:01.892Z","updated_at":"2026-08-01T10:09:01.892Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-20T08:08:35.238Z","updated_at":"2024-08-20T08:08:35.238Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-20T08:08:35.040Z","updated_at":"2024-08-20T08:08:35.040Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":8759904,"name":"patch-project","ecosystem":"npm","description":"An Expo config-plugin and tool to support patch-based CNG","homepage":"https://github.com/expo/expo/tree/main/packages/patch-project#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","cng","prebuild","patch","project"],"namespace":null,"versions_count":288,"first_release_published_at":"2024-03-15T22:21:51.334Z","latest_release_published_at":"2026-09-01T16:17:07.936Z","latest_release_number":"57.0.19","last_synced_at":"2026-09-01T16:17:52.046Z","created_at":"2024-01-17T22:43:50.810Z","updated_at":"2026-09-01T16:17:52.047Z","registry_url":"https://www.npmjs.com/package/patch-project","install_command":"npm install patch-project","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-51":"0.0.2","canary-sdk-55":"55.1.8-canary-20260429-a5e59cf","canary-sdk-56":"56.0.17-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.1.31","sdk-56":"56.0.30","next":"57.0.19","latest":"57.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2024-11-05T10:25:27.000Z","size":3136971,"stargazers_count":34055,"open_issues_count":673,"forks_count":5450,"subscribers_count":300,"default_branch":"main","last_synced_at":"2024-11-05T10:30:04.011Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2024-11-05T10:25:32.000Z","dependencies_parsed_at":"2024-04-23T12:51:47.000Z","dependency_job_id":"91b650b5-5fb1-438f-b414-5ab592e0f6c2","html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":23704,"total_committers":1511,"mean_commits":"15.687624090006619","dds":0.8914107323658454,"last_synced_commit":"7e649b303cc273e06d88257d143fee6544d3798c"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":223156993,"owners_count":17097310,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":405,"last_synced_at":"2024-04-12T10:03:26.593Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/expo","funding_links":[],"total_stars":69025,"followers":1408,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2024-04-12T10:05:06.678Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[]},"repo_metadata_updated_at":"2024-11-10T18:57:27.896Z","dependent_packages_count":0,"downloads":44715,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.771910011781046,"dependent_packages_count":48.131674989517336,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.95179250064919},"purl":"pkg:npm/patch-project","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/patch-project","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/patch-project","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/patch-project/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-11-10T02:53:15.112Z","issues_count":9102,"pull_requests_count":8916,"avg_time_to_close_issue":5657787.278503563,"avg_time_to_close_pull_request":1814590.6944361797,"issues_closed_count":6716,"pull_requests_closed_count":6722,"pull_request_authors_count":650,"issue_authors_count":2966,"avg_comments_per_issue":6.534168314656119,"avg_comments_per_pull_request":1.221287572902647,"merged_pull_requests_count":6003,"bot_issues_count":0,"bot_pull_requests_count":130,"past_year_issues_count":4759,"past_year_pull_requests_count":6449,"past_year_avg_time_to_close_issue":1178733.9765451665,"past_year_avg_time_to_close_pull_request":454383.2272086939,"past_year_issues_closed_count":3148,"past_year_pull_requests_closed_count":4969,"past_year_pull_request_authors_count":470,"past_year_issue_authors_count":1726,"past_year_avg_comments_per_issue":3.2767388106745114,"past_year_avg_comments_per_pull_request":1.2349201426577765,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":86,"past_year_merged_pull_requests_count":4559,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":881,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"wschurman","count":553,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"alanjhughes","count":536,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":513,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"Simek","count":434,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"tsapeta","count":410,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":315,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":134,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"ide","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"szdziedzic","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"kitten","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"betomoedano","count":19,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"kbrandwijk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"tchayen","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"}],"active_maintainers":[{"login":"amandeepmittal","count":694,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":428,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":428,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"Simek","count":390,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"wschurman","count":364,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":314,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":243,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":150,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"szdziedzic","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"kitten","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"ide","count":19,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"betomoedano","count":19,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"tchayen","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/patch-project/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/patch-project/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/patch-project/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/patch-project/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/patch-project/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/patch-project/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-01T21:03:09.076Z","updated_at":"2026-04-01T21:03:09.076Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T15:02:10.367Z","updated_at":"2026-02-25T15:02:10.367Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2024-01-21T14:40:20.007Z","updated_at":"2024-01-21T14:40:20.007Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2024-01-21T14:40:20.042Z","updated_at":"2024-01-21T14:40:20.042Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2024-01-21T14:40:20.158Z","updated_at":"2024-01-21T14:40:20.158Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2024-01-21T14:40:20.234Z","updated_at":"2024-01-21T14:40:20.234Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2024-01-21T14:40:20.270Z","updated_at":"2024-01-21T14:40:20.270Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2024-01-21T14:40:20.346Z","updated_at":"2024-01-21T14:40:20.346Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2024-01-17T22:44:50.886Z","updated_at":"2024-01-17T22:44:50.886Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-05T23:27:08.689Z","updated_at":"2026-08-05T23:27:08.689Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T06:13:04.309Z","updated_at":"2024-01-27T06:13:04.309Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:24:08.947Z","updated_at":"2024-06-26T18:24:08.947Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695632,"name":"expo-font","ecosystem":"npm","description":"Load fonts at runtime and use them in React Native components.","homepage":"https://docs.expo.dev/versions/latest/sdk/font/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","font"],"namespace":null,"versions_count":276,"first_release_published_at":"2023-11-23T16:15:18.127Z","latest_release_published_at":"2026-09-01T16:24:07.769Z","latest_release_number":"57.0.3","last_synced_at":"2026-09-01T16:25:14.949Z","created_at":"2022-04-09T15:17:22.428Z","updated_at":"2026-09-01T16:25:14.950Z","registry_url":"https://www.npmjs.com/package/expo-font","install_command":"npm install expo-font","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"11.10.3","sdk-51":"12.0.5","canary-sdk-55":"55.0.5-canary-20260429-a5e59cf","sdk-55":"55.0.8","sdk-54":"14.0.12","canary-sdk-56":"56.0.6-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","next":"57.0.3","latest":"57.0.2"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T17:35:46.524Z","dependent_packages_count":365,"downloads":33948696,"downloads_period":"last-month","dependent_repos_count":151578,"rankings":{"downloads":0.22114027465530164,"dependent_repos_count":0.08970893158444018,"dependent_packages_count":0.17310406074593107,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":0.8445167766737949,"average":0.4143670601426828},"purl":"pkg:npm/expo-font","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-font","docker_dependents_count":48,"docker_downloads_count":177373,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-font","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-font/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-font/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-font/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-font/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-font/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-font/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-font/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T23:00:25.574Z","updated_at":"2026-04-02T23:00:25.574Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-08T21:03:18.516Z","updated_at":"2022-11-08T21:03:18.516Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T21:03:19.230Z","updated_at":"2022-11-08T21:03:19.230Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T21:03:19.417Z","updated_at":"2022-11-08T21:03:19.417Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T21:03:19.564Z","updated_at":"2022-11-08T21:03:19.564Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T21:03:19.673Z","updated_at":"2022-11-08T21:03:19.673Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-08T21:03:19.704Z","updated_at":"2022-11-08T21:03:19.704Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T21:03:19.734Z","updated_at":"2022-11-08T21:03:19.734Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T21:03:19.949Z","updated_at":"2022-11-08T21:03:19.949Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T09:08:41.202Z","updated_at":"2026-08-02T09:08:41.202Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:31:38.860Z","updated_at":"2024-01-27T00:31:38.860Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:16:13.941Z","updated_at":"2024-06-26T18:16:13.941Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695579,"name":"expo-dev-client","ecosystem":"npm","description":"Expo Development Client","homepage":"https://docs.expo.dev/versions/latest/sdk/dev-client/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-dev-client"],"namespace":null,"versions_count":420,"first_release_published_at":"2023-11-23T16:14:25.273Z","latest_release_published_at":"2026-09-01T16:18:43.714Z","latest_release_number":"57.0.17","last_synced_at":"2026-09-01T16:25:55.092Z","created_at":"2022-04-09T15:17:19.461Z","updated_at":"2026-09-01T16:25:55.092Z","registry_url":"https://www.npmjs.com/package/expo-dev-client","install_command":"npm install expo-dev-client","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"3.3.9","sdk-54":"6.0.21","canary-sdk-55":"55.0.10-canary-20260429-a5e59cf","canary-sdk-56":"56.0.17-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","latest":"57.0.16","next":"57.0.17","sdk-56":"56.0.26","sdk-55":"55.0.40"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-29T03:48:50.479Z","dependent_packages_count":46,"downloads":14991073,"downloads_period":"last-month","dependent_repos_count":1179,"rankings":{"downloads":0.3670820896122809,"dependent_repos_count":0.5917889286154605,"dependent_packages_count":0.9200975343628116,"stargazers_count":0.6035957132808298,"forks_count":0.5493163501280407,"docker_downloads_count":1.5550755318705545,"average":0.7644926913116631},"purl":"pkg:npm/expo-dev-client","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-dev-client","docker_dependents_count":2,"docker_downloads_count":4073,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-dev-client","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-dev-client/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-28T11:00:27.046Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":679,"past_year_pull_requests_count":1955,"past_year_avg_time_to_close_issue":1415919.6871794872,"past_year_avg_time_to_close_pull_request":725105.6645101664,"past_year_issues_closed_count":390,"past_year_pull_requests_closed_count":1082,"past_year_pull_request_authors_count":385,"past_year_issue_authors_count":550,"past_year_avg_comments_per_issue":2.6244477172312224,"past_year_avg_comments_per_pull_request":2.20460358056266,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":843,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":117,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":93,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T18:01:24.406Z","updated_at":"2026-04-02T18:01:24.406Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T20:30:33.599Z","updated_at":"2026-02-25T20:30:33.599Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T12:11:15.392Z","updated_at":"2022-11-10T12:11:15.392Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T12:11:15.400Z","updated_at":"2022-11-10T12:11:15.400Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T12:11:15.424Z","updated_at":"2022-11-10T12:11:15.424Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T12:11:15.453Z","updated_at":"2022-11-10T12:11:15.453Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T12:11:15.461Z","updated_at":"2022-11-10T12:11:15.461Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T12:11:15.476Z","updated_at":"2022-11-10T12:11:15.476Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T12:11:15.517Z","updated_at":"2022-11-10T12:11:15.517Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T22:30:19.308Z","updated_at":"2026-08-01T22:30:19.308Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2026-02-11T12:46:22.191Z","updated_at":"2026-02-11T12:46:22.191Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2026-02-11T12:46:23.242Z","updated_at":"2026-02-11T12:46:23.242Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":4399040,"name":"expo-eas-client","ecosystem":"npm","description":"Stable client identifier for EAS services","homepage":"https://github.com/expo/expo/tree/main/packages/expo-eas-client","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","eas-client","EASClient"],"namespace":null,"versions_count":201,"first_release_published_at":"2023-11-23T16:14:59.143Z","latest_release_published_at":"2026-09-01T16:19:56.894Z","latest_release_number":"57.0.3","last_synced_at":"2026-09-01T16:31:52.265Z","created_at":"2022-05-24T13:42:42.368Z","updated_at":"2026-09-01T16:31:52.266Z","registry_url":"https://www.npmjs.com/package/expo-eas-client","install_command":"npm install expo-eas-client","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"0.11.2","sdk-51":"0.12.0","canary-sdk-55":"55.0.3-canary-20260429-a5e59cf","canary-sdk-56":"56.0.2-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","next":"57.0.3","latest":"57.0.2"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T13:32:59.551Z","dependent_packages_count":3,"downloads":13147674,"downloads_period":"last-month","dependent_repos_count":3153,"rankings":{"downloads":0.3194570490627766,"dependent_repos_count":0.3944332124197704,"dependent_packages_count":5.888476794839281,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":0.9087712071601004,"average":1.4389615843258106},"purl":"pkg:npm/expo-eas-client","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-eas-client","docker_dependents_count":6,"docker_downloads_count":5504,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-eas-client","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-eas-client/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-eas-client/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-eas-client/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-eas-client/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-eas-client/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-eas-client/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-eas-client/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-04T21:31:21.634Z","updated_at":"2026-04-04T21:31:21.634Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-12T10:23:03.052Z","updated_at":"2022-11-12T10:23:03.052Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T10:23:01.982Z","updated_at":"2022-11-12T10:23:01.982Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T10:23:02.204Z","updated_at":"2022-11-12T10:23:02.204Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T10:23:02.841Z","updated_at":"2022-11-12T10:23:02.841Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T10:23:04.048Z","updated_at":"2022-11-12T10:23:04.048Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-12T10:23:04.353Z","updated_at":"2022-11-12T10:23:04.353Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T10:23:05.221Z","updated_at":"2022-11-12T10:23:05.221Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T10:23:06.900Z","updated_at":"2022-11-12T10:23:06.900Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T19:30:20.483Z","updated_at":"2026-08-02T19:30:20.483Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:30:22.981Z","updated_at":"2024-01-27T00:30:22.981Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:18:55.220Z","updated_at":"2024-06-26T18:18:55.220Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":7660510,"name":"expo-insights","ecosystem":"npm","description":"Expo module that offers developers insight into the usage data of the app","homepage":"https://docs.expo.dev/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-insights","ExpoInsights","insights","EAS"],"namespace":null,"versions_count":242,"first_release_published_at":"2023-11-23T16:15:46.877Z","latest_release_published_at":"2026-09-01T16:17:28.597Z","latest_release_number":"57.0.15","last_synced_at":"2026-09-01T16:31:53.327Z","created_at":"2023-04-28T22:13:56.900Z","updated_at":"2026-09-01T16:31:53.327Z","registry_url":"https://www.npmjs.com/package/expo-insights","install_command":"npm install expo-insights","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"0.6.1","sdk-51":"0.7.0","canary-sdk-55":"55.0.11-canary-20260429-a5e59cf","canary-sdk-56":"56.0.15-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.21","latest":"57.0.14","next":"57.0.15","sdk-56":"56.0.25"},"contentPolicy":null},"repo_metadata":{"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source platform for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2024-01-06T21:00:58.000Z","size":2870401,"stargazers_count":25602,"open_issues_count":654,"forks_count":4480,"subscribers_count":279,"default_branch":"main","last_synced_at":"2024-01-06T21:12:25.920Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2024-01-06T19:34:04.000Z","dependencies_parsed_at":"2023-12-27T21:13:14.111Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":20326,"total_committers":1266,"mean_commits":16.05529225908373,"dds":0.8868444356981207,"last_synced_commit":"04e54cdd499e737353027d7c612eed1cba86684f"},"previous_names":[],"tags_count":0,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":179535955,"owners_count":10829702,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":389,"last_synced_at":"2023-04-09T19:27:08.278Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/expo","created_at":"2022-11-02T16:30:00.841Z","updated_at":"2023-04-09T19:27:08.318Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[]},"repo_metadata_updated_at":"2024-01-06T21:15:02.733Z","dependent_packages_count":0,"downloads":1186532,"downloads_period":"last-month","dependent_repos_count":5,"rankings":{"downloads":0.9589593627104971,"dependent_repos_count":5.0198595178007075,"dependent_packages_count":51.836728746128266,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":11.787635773822482},"purl":"pkg:npm/expo-insights","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-insights","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-insights","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-insights/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-01-05T18:06:06.117Z","issues_count":3867,"pull_requests_count":3137,"avg_time_to_close_issue":6618922.635231988,"avg_time_to_close_pull_request":1293121.2857777777,"issues_closed_count":2647,"pull_requests_closed_count":2250,"pull_request_authors_count":214,"issue_authors_count":1273,"avg_comments_per_issue":7.9190587018360485,"avg_comments_per_pull_request":0.8696206566783551,"merged_pull_requests_count":2033,"bot_issues_count":0,"bot_pull_requests_count":47,"past_year_issues_count":2909,"past_year_pull_requests_count":3062,"past_year_avg_time_to_close_issue":1812226.40877098,"past_year_avg_time_to_close_pull_request":697338.1319285387,"past_year_issues_closed_count":1845,"past_year_pull_requests_closed_count":2183,"past_year_pull_request_authors_count":202,"past_year_issue_authors_count":988,"past_year_avg_comments_per_issue":4.286352698521829,"past_year_avg_comments_per_pull_request":0.8145003265839321,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":47,"past_year_merged_pull_requests_count":2002,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues"},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-insights/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-insights/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-insights/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-insights/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-insights/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-insights/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-10T20:41:28.811Z","updated_at":"2026-04-10T20:41:28.811Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-03-05T13:35:16.034Z","updated_at":"2026-03-05T13:35:16.034Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2023-04-30T06:59:16.353Z","updated_at":"2023-04-30T06:59:16.353Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2023-04-30T06:59:16.359Z","updated_at":"2023-04-30T06:59:16.359Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2023-04-30T06:59:16.381Z","updated_at":"2023-04-30T06:59:16.381Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2023-04-30T06:59:16.402Z","updated_at":"2023-04-30T06:59:16.402Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2023-04-30T06:59:16.409Z","updated_at":"2023-04-30T06:59:16.409Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2023-04-30T06:59:16.425Z","updated_at":"2023-04-30T06:59:16.425Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2023-04-30T06:59:16.464Z","updated_at":"2023-04-30T06:59:16.464Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T11:23:48.940Z","updated_at":"2026-08-06T11:23:48.940Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-02-05T06:49:30.336Z","updated_at":"2024-02-05T06:49:30.336Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:11.133Z","updated_at":"2024-06-26T18:19:11.133Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695528,"name":"expo-barcode-scanner-interface","ecosystem":"npm","description":"An interface for expo-barcode-scanner.","homepage":"https://github.com/expo/expo/tree/master/packages/expo-barcode-scanner-interface","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["barcode-scanner","barcode","expo","react-native"],"namespace":null,"versions_count":10,"first_release_published_at":"2018-08-31T14:28:14.328Z","latest_release_published_at":"2019-02-27T21:05:56.038Z","latest_release_number":"3.0.0","last_synced_at":"2026-08-31T12:28:04.960Z","created_at":"2022-04-09T15:17:16.139Z","updated_at":"2026-08-31T12:28:04.960Z","registry_url":"https://www.npmjs.com/package/expo-barcode-scanner-interface","install_command":"npm install expo-barcode-scanner-interface","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"next":"2.0.0-rc.2","latest":"3.0.0"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-29T22:21:32.075Z","dependent_packages_count":12,"downloads":4092,"downloads_period":"last-month","dependent_repos_count":5148,"rankings":{"downloads":4.487636269929302,"dependent_repos_count":0.3250313052780881,"dependent_packages_count":1.7796504254089736,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":1.5429898486178595},"purl":"pkg:npm/expo-barcode-scanner-interface","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-barcode-scanner-interface","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-barcode-scanner-interface","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-barcode-scanner-interface/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-29T11:47:15.798Z","issues_count":7173,"pull_requests_count":16787,"avg_time_to_close_issue":4984450.26026216,"avg_time_to_close_pull_request":1687856.7081740664,"issues_closed_count":5796,"pull_requests_closed_count":13604,"pull_request_authors_count":1494,"issue_authors_count":4942,"avg_comments_per_issue":4.503694409591524,"avg_comments_per_pull_request":1.6120807767915648,"merged_pull_requests_count":11855,"bot_issues_count":1,"bot_pull_requests_count":220,"past_year_issues_count":679,"past_year_pull_requests_count":1982,"past_year_avg_time_to_close_issue":1412504.5333333334,"past_year_avg_time_to_close_pull_request":721037.1230342275,"past_year_issues_closed_count":390,"past_year_pull_requests_closed_count":1081,"past_year_pull_request_authors_count":391,"past_year_issue_authors_count":549,"past_year_avg_comments_per_issue":2.6318114874815906,"past_year_avg_comments_per_pull_request":2.213420787083754,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":40,"past_year_merged_pull_requests_count":845,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":552,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":161,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"expo-bot","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":193,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":93,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"hirbod","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-barcode-scanner-interface/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-barcode-scanner-interface/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-barcode-scanner-interface/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-barcode-scanner-interface/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-barcode-scanner-interface/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-barcode-scanner-interface/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-07-31T00:30:14.837Z","updated_at":"2026-07-31T00:30:14.837Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-12T07:20:43.453Z","updated_at":"2022-11-12T07:20:43.453Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T07:20:43.548Z","updated_at":"2022-11-12T07:20:43.548Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2026-07-31T00:30:14.685Z","updated_at":"2026-07-31T00:30:14.685Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2026-07-31T00:30:14.707Z","updated_at":"2026-07-31T00:30:14.707Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2026-07-31T00:30:14.723Z","updated_at":"2026-07-31T00:30:14.723Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2026-07-31T00:30:14.850Z","updated_at":"2026-07-31T00:30:14.850Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2026-07-31T00:30:14.732Z","updated_at":"2026-07-31T00:30:14.732Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2026-07-31T00:30:14.764Z","updated_at":"2026-07-31T00:30:14.764Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T05:01:44.982Z","updated_at":"2026-08-02T05:01:44.982Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2026-07-31T00:30:14.786Z","updated_at":"2026-07-31T00:30:14.786Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2026-07-31T00:30:14.834Z","updated_at":"2026-07-31T00:30:14.834Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14109784,"name":"org.mvnpm.at.expo:metro-config","ecosystem":"maven","description":"A Metro config for running React Native projects with the Metro bundler","homepage":"https://github.com/expo/expo/tree/main/packages/@expo/metro-config#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":[],"namespace":"org.mvnpm.at.expo","versions_count":27,"first_release_published_at":"2026-03-24T05:00:27.000Z","latest_release_published_at":"2026-08-29T02:09:41.000Z","latest_release_number":"57.0.12","last_synced_at":"2026-08-31T09:20:24.337Z","created_at":"2026-03-24T05:16:20.196Z","updated_at":"2026-08-31T09:20:24.338Z","registry_url":"https://central.sonatype.com/artifact/org.mvnpm.at.expo/metro-config/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.mvnpm.at.expo/metro-config/","metadata":{},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-29T19:15:03.547Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":29.74441852940383,"dependent_packages_count":42.52304477511333,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":36.133731652258575},"purl":"pkg:maven/org.mvnpm.at.expo/metro-config","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.mvnpm.at.expo:metro-config","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.mvnpm.at.expo:metro-config","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.mvnpm.at.expo:metro-config/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-29T11:47:15.798Z","issues_count":7173,"pull_requests_count":16787,"avg_time_to_close_issue":4984450.26026216,"avg_time_to_close_pull_request":1687856.7081740664,"issues_closed_count":5796,"pull_requests_closed_count":13604,"pull_request_authors_count":1494,"issue_authors_count":4942,"avg_comments_per_issue":4.503694409591524,"avg_comments_per_pull_request":1.6120807767915648,"merged_pull_requests_count":11855,"bot_issues_count":1,"bot_pull_requests_count":220,"past_year_issues_count":679,"past_year_pull_requests_count":1982,"past_year_avg_time_to_close_issue":1412504.5333333334,"past_year_avg_time_to_close_pull_request":721037.1230342275,"past_year_issues_closed_count":390,"past_year_pull_requests_closed_count":1081,"past_year_pull_request_authors_count":391,"past_year_issue_authors_count":549,"past_year_avg_comments_per_issue":2.6318114874815906,"past_year_avg_comments_per_pull_request":2.213420787083754,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":40,"past_year_merged_pull_requests_count":845,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":552,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":161,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"expo-bot","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":193,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":93,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"hirbod","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-config/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-config/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-config/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-config/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-config/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-config/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":620556,"maintainers_count":0,"namespaces_count":82431,"keywords_count":36859,"github":"maven-central","metadata":{"funded_packages_count":48141,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-09-02T05:05:01.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":1695915,"name":"expo-updates","ecosystem":"npm","description":"Fetches and manages remotely-hosted assets and updates to your app's JS bundle.","homepage":"https://docs.expo.dev/versions/latest/sdk/updates/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","updates"],"namespace":null,"versions_count":483,"first_release_published_at":"2023-11-23T16:19:20.001Z","latest_release_published_at":"2026-09-01T16:16:28.077Z","latest_release_number":"57.0.20","last_synced_at":"2026-09-01T16:38:45.084Z","created_at":"2022-04-09T15:17:36.576Z","updated_at":"2026-09-01T22:23:58.562Z","registry_url":"https://www.npmjs.com/package/expo-updates","install_command":"npm install expo-updates","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"0.24.11","sdk-53":"0.28.18","sdk-52":"0.27.5","canary-sdk-55":"55.0.12-canary-20260429-a5e59cf","canary-sdk-56":"56.0.18-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-54":"29.0.20","sdk-55":"55.0.30","sdk-56":"56.0.26","latest":"57.0.19","next":"57.0.20"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-01T22:23:58.562Z","dependent_packages_count":192,"downloads":13452130,"downloads_period":"last-month","dependent_repos_count":7177,"rankings":{"downloads":0.33734187817820444,"dependent_repos_count":0.2979470131882284,"dependent_packages_count":0.25955818489188,"stargazers_count":0.6035957132808298,"forks_count":0.5493163501280407,"docker_downloads_count":0.8492227934604875,"average":0.48283032218794514},"purl":"pkg:npm/expo-updates","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-updates","docker_dependents_count":9,"docker_downloads_count":6726,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-updates","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-updates/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T17:31:04.416Z","updated_at":"2026-04-02T17:31:04.416Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T00:01:34.078Z","updated_at":"2026-02-26T00:01:34.078Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-16T22:41:52.341Z","updated_at":"2022-11-16T22:41:52.341Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-16T22:41:52.352Z","updated_at":"2022-11-16T22:41:52.352Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-16T22:41:52.375Z","updated_at":"2022-11-16T22:41:52.375Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-16T22:41:52.422Z","updated_at":"2022-11-16T22:41:52.422Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-16T22:41:52.495Z","updated_at":"2022-11-16T22:41:52.495Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-16T22:41:52.516Z","updated_at":"2022-11-16T22:41:52.516Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-16T22:41:52.556Z","updated_at":"2022-11-16T22:41:52.556Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-03T02:30:12.617Z","updated_at":"2026-08-03T02:30:12.617Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-28T06:13:16.498Z","updated_at":"2024-01-28T06:13:16.498Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:24:01.544Z","updated_at":"2024-06-26T18:24:01.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14109782,"name":"org.mvnpm.at.expo:json-file","ecosystem":"maven","description":"A module for reading, writing, and manipulating JSON files","homepage":"https://github.com/expo/expo/tree/main/packages/@expo/json-file#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":[],"namespace":"org.mvnpm.at.expo","versions_count":10,"first_release_published_at":"2026-03-24T05:06:09.000Z","latest_release_published_at":"2026-07-16T00:16:57.000Z","latest_release_number":"11.0.1","last_synced_at":"2026-08-31T09:19:15.778Z","created_at":"2026-03-24T05:16:20.090Z","updated_at":"2026-08-31T09:19:15.778Z","registry_url":"https://central.sonatype.com/artifact/org.mvnpm.at.expo/json-file/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.mvnpm.at.expo/json-file/","metadata":{},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-15T11:23:22.000Z","size":3745212,"stargazers_count":51613,"open_issues_count":723,"forks_count":13463,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-15T12:07:27.719Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-15T11:24:54.000Z","dependencies_parsed_at":"2025-10-28T17:25:26.631Z","dependency_job_id":"7a0fe9ff-3246-4aeb-913c-f8ab8486f23b","html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36685507,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-15T02:00:05.847Z","response_time":94,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":454,"last_synced_at":"2026-08-14T13:38:38.112Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101367,"followers":4653,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-14T13:38:38.130Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-15T12:14:22.942Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":29.74441852940383,"dependent_packages_count":42.52304477511333,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":36.133731652258575},"purl":"pkg:maven/org.mvnpm.at.expo/json-file","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.mvnpm.at.expo:json-file","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.mvnpm.at.expo:json-file","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.mvnpm.at.expo:json-file/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-14T15:00:18.205Z","issues_count":7066,"pull_requests_count":16376,"avg_time_to_close_issue":5021261.4493792625,"avg_time_to_close_pull_request":1689055.3988940367,"issues_closed_count":5717,"pull_requests_closed_count":13382,"pull_request_authors_count":1409,"issue_authors_count":4876,"avg_comments_per_issue":4.506651570902916,"avg_comments_per_pull_request":1.5672325354176844,"merged_pull_requests_count":11687,"bot_issues_count":1,"bot_pull_requests_count":205,"past_year_issues_count":644,"past_year_pull_requests_count":1787,"past_year_avg_time_to_close_issue":1225756.2105263157,"past_year_avg_time_to_close_pull_request":575335.1005025125,"past_year_issues_closed_count":361,"past_year_pull_requests_closed_count":995,"past_year_pull_request_authors_count":335,"past_year_issue_authors_count":530,"past_year_avg_comments_per_issue":2.375776397515528,"past_year_avg_comments_per_pull_request":1.821488528259653,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":26,"past_year_merged_pull_requests_count":788,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1635,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1077,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":753,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":546,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":337,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":297,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"ramonclaudio","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":107,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"intergalacticspacehighway","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"jakex7","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"expo-bot","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"brentvatne","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"hirbod","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"byCedric","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"entiendoNull","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"betomoedano","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:json-file/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:json-file/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:json-file/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:json-file/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:json-file/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:json-file/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":620556,"maintainers_count":0,"namespaces_count":82431,"keywords_count":36859,"github":"maven-central","metadata":{"funded_packages_count":48141,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-09-02T05:05:01.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":1695582,"name":"expo-dev-launcher","ecosystem":"npm","description":"Pre-release version of the Expo development launcher package for testing.","homepage":"https://docs.expo.dev","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native"],"namespace":null,"versions_count":445,"first_release_published_at":"2023-11-23T16:14:36.670Z","latest_release_published_at":"2026-09-01T16:22:20.505Z","latest_release_number":"57.0.18","last_synced_at":"2026-09-01T16:44:08.825Z","created_at":"2022-04-09T15:17:19.501Z","updated_at":"2026-09-02T07:19:20.572Z","registry_url":"https://www.npmjs.com/package/expo-dev-launcher","install_command":"npm install expo-dev-launcher","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"3.6.7","sdk-54":"6.0.21","canary-sdk-55":"55.0.11-canary-20260429-a5e59cf","canary-sdk-56":"56.0.17-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","latest":"57.0.16","sdk-56":"56.0.27","sdk-55":"55.0.41","next":"57.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T07:19:20.571Z","dependent_packages_count":3,"downloads":14963789,"downloads_period":"last-month","dependent_repos_count":1368,"rankings":{"downloads":0.346462680828142,"dependent_repos_count":0.5611285257509093,"dependent_packages_count":5.748726153199633,"stargazers_count":0.6031767690449568,"forks_count":0.5481971922735139,"docker_downloads_count":1.581885129977167,"average":1.564929408512387},"purl":"pkg:npm/expo-dev-launcher","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-dev-launcher","docker_dependents_count":2,"docker_downloads_count":4073,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-dev-launcher","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-dev-launcher/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-launcher/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-launcher/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-launcher/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-launcher/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-launcher/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-launcher/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T19:30:30.824Z","updated_at":"2026-04-02T19:30:30.824Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T20:31:17.560Z","updated_at":"2026-02-26T20:31:17.560Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T21:03:18.513Z","updated_at":"2022-11-08T21:03:18.513Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T21:03:18.774Z","updated_at":"2022-11-08T21:03:18.774Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T21:03:19.249Z","updated_at":"2022-11-08T21:03:19.249Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T21:03:19.415Z","updated_at":"2022-11-08T21:03:19.415Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T07:27:03.134Z","updated_at":"2025-09-20T07:27:03.134Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T21:03:19.560Z","updated_at":"2022-11-08T21:03:19.560Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T21:03:19.793Z","updated_at":"2022-11-08T21:03:19.793Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T09:11:41.551Z","updated_at":"2026-08-02T09:11:41.551Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T06:13:19.395Z","updated_at":"2024-01-27T06:13:19.395Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:35.682Z","updated_at":"2024-06-26T18:19:35.682Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":2501798,"name":"unimodules-font-interface","ecosystem":"npm","description":"Interface for managing fonts.","homepage":"https://github.com/expo/expo/tree/master/packages/unimodules-font-interface","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","font"],"namespace":null,"versions_count":16,"first_release_published_at":"2019-03-14T19:06:10.035Z","latest_release_published_at":"2021-03-10T01:45:26.998Z","latest_release_number":"6.1.0","last_synced_at":"2026-08-31T09:22:13.396Z","created_at":"2022-04-10T02:42:02.499Z","updated_at":"2026-08-31T09:22:13.396Z","registry_url":"https://www.npmjs.com/package/unimodules-font-interface","install_command":"npm install unimodules-font-interface","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"6.1.0"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T15:17:48.682Z","dependent_packages_count":7,"downloads":38185,"downloads_period":"last-month","dependent_repos_count":83451,"rankings":{"downloads":0.9902736923045536,"dependent_repos_count":0.11444915561062345,"dependent_packages_count":2.7080444545623874,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":0.8484409283743105,"average":0.9698234246747507},"purl":"pkg:npm/unimodules-font-interface","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/unimodules-font-interface","docker_dependents_count":7,"docker_downloads_count":2399,"usage_url":"https://repos.ecosyste.ms/usage/npm/unimodules-font-interface","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/unimodules-font-interface/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-font-interface/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-font-interface/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-font-interface/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-font-interface/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-font-interface/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-font-interface/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T09:02:14.101Z","updated_at":"2026-04-03T09:02:14.101Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-20T09:25:17.439Z","updated_at":"2022-11-20T09:25:17.439Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-20T09:25:17.465Z","updated_at":"2022-11-20T09:25:17.465Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-20T09:25:17.512Z","updated_at":"2022-11-20T09:25:17.512Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-20T09:25:17.540Z","updated_at":"2022-11-20T09:25:17.540Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-20T09:25:17.557Z","updated_at":"2022-11-20T09:25:17.557Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-20T09:25:17.568Z","updated_at":"2022-11-20T09:25:17.568Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-20T09:25:17.584Z","updated_at":"2022-11-20T09:25:17.584Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-20T09:25:17.602Z","updated_at":"2022-11-20T09:25:17.602Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T09:06:46.594Z","updated_at":"2026-08-02T09:06:46.594Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:32:45.798Z","updated_at":"2024-01-27T00:32:45.798Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-25T21:30:14.476Z","updated_at":"2024-06-25T21:30:14.476Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695513,"name":"expo-asset","ecosystem":"npm","description":"An Expo universal module to download assets and pass them into other APIs","homepage":"https://docs.expo.dev/versions/latest/sdk/asset/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","asset"],"namespace":null,"versions_count":323,"first_release_published_at":"2023-11-23T16:12:52.791Z","latest_release_published_at":"2026-09-01T16:19:09.931Z","latest_release_number":"57.0.16","last_synced_at":"2026-09-01T16:52:48.461Z","created_at":"2022-04-09T15:17:15.433Z","updated_at":"2026-09-01T16:52:48.461Z","registry_url":"https://www.npmjs.com/package/expo-asset","install_command":"npm install expo-asset","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"9.0.2","sdk-51":"10.0.6","sdk-54":"12.0.13","canary-sdk-55":"55.0.8-canary-20260429-a5e59cf","canary-sdk-56":"56.0.16-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.20","next":"57.0.16","latest":"57.0.15","sdk-56":"56.0.24"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T22:09:41.552Z","dependent_packages_count":216,"downloads":32261273,"downloads_period":"last-month","dependent_repos_count":151921,"rankings":{"downloads":0.21772087591777814,"dependent_repos_count":0.08965146269809526,"dependent_packages_count":0.2350572686287914,"stargazers_count":0.6035957132808298,"forks_count":0.5493163501280407,"docker_downloads_count":0.8445167766737949,"average":0.42330974122122167},"purl":"pkg:npm/expo-asset","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-asset","docker_dependents_count":48,"docker_downloads_count":177373,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-asset","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-asset/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-asset/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-asset/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-asset/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-asset/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-asset/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-asset/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-07-03T12:04:58.771Z","updated_at":"2026-07-03T12:04:58.771Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-10T11:28:19.577Z","updated_at":"2022-11-10T11:28:19.577Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T11:28:19.587Z","updated_at":"2022-11-10T11:28:19.587Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T11:28:19.603Z","updated_at":"2022-11-10T11:28:19.603Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T11:28:19.612Z","updated_at":"2022-11-10T11:28:19.612Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T11:28:19.618Z","updated_at":"2022-11-10T11:28:19.618Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T11:28:19.621Z","updated_at":"2022-11-10T11:28:19.621Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T11:28:19.624Z","updated_at":"2022-11-10T11:28:19.624Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T11:28:19.636Z","updated_at":"2022-11-10T11:28:19.636Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2022-11-10T11:28:19.639Z","updated_at":"2022-11-10T11:28:19.639Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-20T08:38:21.189Z","updated_at":"2024-08-20T08:38:21.189Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-20T08:38:21.098Z","updated_at":"2024-08-20T08:38:21.098Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":10446399,"name":"@kudo-ci/expo-asset","ecosystem":"npm","description":"An Expo universal module to download assets and pass them into other APIs","homepage":"https://docs.expo.dev/versions/latest/sdk/asset/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","asset"],"namespace":"kudo-ci","versions_count":4,"first_release_published_at":"2024-06-26T06:56:05.540Z","latest_release_published_at":"2024-06-26T08:53:32.058Z","latest_release_number":"10.0.9","last_synced_at":"2026-08-31T09:36:24.128Z","created_at":"2024-06-26T08:20:11.255Z","updated_at":"2026-08-31T09:36:24.128Z","registry_url":"https://www.npmjs.com/package/@kudo-ci/expo-asset","install_command":"npm install @kudo-ci/expo-asset","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"10.0.9"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-23T16:16:21.064Z","dependent_packages_count":0,"downloads":13,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":27.722568559126458,"dependent_packages_count":40.28621980346475,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":34.00439418129561},"purl":"pkg:npm/%40kudo-ci/expo-asset","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@kudo-ci/expo-asset","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@kudo-ci/expo-asset","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@kudo-ci/expo-asset/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-23T11:00:10.005Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":658,"past_year_pull_requests_count":1898,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":639905.499034749,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1036,"past_year_pull_request_authors_count":366,"past_year_issue_authors_count":537,"past_year_avg_comments_per_issue":2.5182370820668694,"past_year_avg_comments_per_pull_request":2.072708113804004,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":812,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@kudo-ci%2Fexpo-asset/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@kudo-ci%2Fexpo-asset/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@kudo-ci%2Fexpo-asset/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@kudo-ci%2Fexpo-asset/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@kudo-ci%2Fexpo-asset/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@kudo-ci%2Fexpo-asset/codemeta","maintainers":[{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2024-06-26T08:20:12.414Z","updated_at":"2024-06-26T08:20:12.414Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695581,"name":"expo-dev-client-components","ecosystem":"npm","description":"Shared JS components and configuration for expo-dev-client","homepage":"https://docs.expo.dev","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-dev-client-components"],"namespace":null,"versions_count":162,"first_release_published_at":"2023-11-23T16:14:20.512Z","latest_release_published_at":"2026-04-02T19:34:12.241Z","latest_release_number":"55.0.3","last_synced_at":"2026-08-31T10:11:23.651Z","created_at":"2022-04-09T15:17:19.478Z","updated_at":"2026-08-31T10:11:23.651Z","registry_url":"https://www.npmjs.com/package/expo-dev-client-components","install_command":"npm install expo-dev-client-components","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"1.8.0","sdk-51":"1.8.1","canary":"56.0.0-canary-20260402-87c5ce2","canary-sdk-55":"55.0.3-canary-20260402-9da566b","next":"55.0.3","latest":"55.0.3"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T15:54:51.812Z","dependent_packages_count":3,"downloads":6743,"downloads_period":"last-month","dependent_repos_count":4,"rankings":{"downloads":9.647500321975272,"dependent_repos_count":5.831095361873015,"dependent_packages_count":5.799786019274363,"stargazers_count":0.603759504619969,"forks_count":0.5494001643716063,"docker_downloads_count":null,"average":4.486308274422845},"purl":"pkg:npm/expo-dev-client-components","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-dev-client-components","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-dev-client-components","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-dev-client-components/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client-components/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client-components/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client-components/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client-components/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client-components/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-client-components/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-01T21:02:12.976Z","updated_at":"2026-04-01T21:02:12.976Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-12T07:20:39.959Z","updated_at":"2022-11-12T07:20:39.959Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T07:20:39.845Z","updated_at":"2022-11-12T07:20:39.845Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T07:20:39.854Z","updated_at":"2022-11-12T07:20:39.854Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T07:20:39.927Z","updated_at":"2022-11-12T07:20:39.927Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T07:20:40.060Z","updated_at":"2022-11-12T07:20:40.060Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-23T17:53:34.606Z","updated_at":"2025-09-23T17:53:34.606Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T07:20:40.124Z","updated_at":"2022-11-12T07:20:40.124Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T07:20:40.201Z","updated_at":"2022-11-12T07:20:40.201Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-04T00:17:02.155Z","updated_at":"2026-08-04T00:17:02.155Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:31:06.192Z","updated_at":"2024-01-27T00:31:06.192Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:26.228Z","updated_at":"2024-06-26T18:19:26.228Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14109843,"name":"org.mvnpm.at.expo:devtools","ecosystem":"maven","description":"DevTools plugin helpers for Expo","homepage":"https://github.com/expo/expo/tree/main/packages/@expo/devtools#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":[],"namespace":"org.mvnpm.at.expo","versions_count":6,"first_release_published_at":"2026-03-24T05:36:21.000Z","latest_release_published_at":"2026-07-16T00:16:58.000Z","latest_release_number":"57.0.1","last_synced_at":"2026-08-31T09:45:08.476Z","created_at":"2026-03-24T06:01:35.509Z","updated_at":"2026-08-31T09:45:08.477Z","registry_url":"https://central.sonatype.com/artifact/org.mvnpm.at.expo/devtools/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.mvnpm.at.expo/devtools/","metadata":{},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T15:54:52.304Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":29.74441852940383,"dependent_packages_count":42.52304477511333,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":36.133731652258575},"purl":"pkg:maven/org.mvnpm.at.expo/devtools","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.mvnpm.at.expo:devtools","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.mvnpm.at.expo:devtools","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.mvnpm.at.expo:devtools/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:devtools/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:devtools/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:devtools/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:devtools/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:devtools/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:devtools/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":620556,"maintainers_count":0,"namespaces_count":82431,"keywords_count":36859,"github":"maven-central","metadata":{"funded_packages_count":48141,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-09-02T05:05:01.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":1695561,"name":"expo-constants-interface","ecosystem":"npm","description":"An interface for expo-constants.","homepage":"https://github.com/expo/expo/tree/master/packages/expo-constants-interface","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","constants"],"namespace":null,"versions_count":17,"first_release_published_at":"2018-07-06T21:54:25.863Z","latest_release_published_at":"2019-02-27T21:04:59.124Z","latest_release_number":"3.0.0","last_synced_at":"2026-08-31T09:40:41.982Z","created_at":"2022-04-09T15:17:18.175Z","updated_at":"2026-08-31T09:40:41.983Z","registry_url":"https://www.npmjs.com/package/expo-constants-interface","install_command":"npm install expo-constants-interface","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"next":"2.1.0-alpha.0","latest":"3.0.0"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T03:22:28.658Z","dependent_packages_count":12,"downloads":3172,"downloads_period":"last-month","dependent_repos_count":5258,"rankings":{"downloads":4.421290977060132,"dependent_repos_count":0.32266932013027827,"dependent_packages_count":1.7796504254089736,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":1.5292483930144634},"purl":"pkg:npm/expo-constants-interface","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-constants-interface","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-constants-interface","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-constants-interface/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-constants-interface/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-constants-interface/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-constants-interface/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-constants-interface/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-constants-interface/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-constants-interface/codemeta","maintainers":[{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-12T07:20:39.546Z","updated_at":"2022-11-12T07:20:39.546Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T07:20:39.588Z","updated_at":"2022-11-12T07:20:39.588Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T07:20:39.659Z","updated_at":"2022-11-12T07:20:39.659Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T07:20:39.840Z","updated_at":"2022-11-12T07:20:39.840Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T07:20:39.727Z","updated_at":"2022-11-12T07:20:39.727Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":4398595,"name":"erfan-expo-av","ecosystem":"npm","description":"Fixed version of expo-av for playing audios with localUri.","homepage":"https://docs.expo.dev/versions/latest/sdk/av/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","react-native","audio","video"],"namespace":null,"versions_count":1,"first_release_published_at":"2022-03-22T23:45:14.523Z","latest_release_published_at":"2022-03-22T23:45:14.523Z","latest_release_number":"1.0.0","last_synced_at":"2026-08-31T10:11:25.224Z","created_at":"2022-05-24T13:42:34.582Z","updated_at":"2026-08-31T10:11:25.224Z","registry_url":"https://www.npmjs.com/package/erfan-expo-av","install_command":"npm install erfan-expo-av","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"1.0.0"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T03:22:28.882Z","dependent_packages_count":1,"downloads":13,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":48.278211043316155,"dependent_repos_count":25.30552159382132,"dependent_packages_count":16.219766897652278,"stargazers_count":0.8487055806897108,"forks_count":0.6990965312391365,"average":18.27026032934372},"purl":"pkg:npm/erfan-expo-av","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/erfan-expo-av","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/erfan-expo-av","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/erfan-expo-av/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/erfan-expo-av/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/erfan-expo-av/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/erfan-expo-av/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/erfan-expo-av/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/erfan-expo-av/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/erfan-expo-av/codemeta","maintainers":[{"uuid":"erfn_po","login":"erfn_po","name":null,"email":"erfanpoorsina@gmail.com","url":null,"packages_count":19,"html_url":"https://www.npmjs.com/~erfn_po","role":null,"created_at":"2022-11-15T20:21:53.365Z","updated_at":"2022-11-15T20:21:53.365Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/erfn_po/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695862,"name":"expo-system-ui","ecosystem":"npm","description":"Interact with system UI elements","homepage":"https://docs.expo.dev/versions/latest/sdk/system-ui","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","background-color","user-interface","appearance"],"namespace":null,"versions_count":250,"first_release_published_at":"2023-11-23T16:18:46.859Z","latest_release_published_at":"2026-08-26T19:58:30.332Z","latest_release_number":"57.0.3","last_synced_at":"2026-09-01T18:43:06.959Z","created_at":"2022-04-09T15:17:34.031Z","updated_at":"2026-09-01T18:43:06.959Z","registry_url":"https://www.npmjs.com/package/expo-system-ui","install_command":"npm install expo-system-ui","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"2.9.3","sdk-51":"3.0.4","canary-sdk-55":"55.0.10-canary-20260429-a5e59cf","canary-sdk-56":"56.0.6-canary-20260701-9100865","latest":"57.0.3","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.22","next":"57.0.3"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T14:59:55.044Z","dependent_packages_count":41,"downloads":14867291,"downloads_period":"last-month","dependent_repos_count":1058,"rankings":{"downloads":0.5416436312478665,"dependent_repos_count":0.6143236620081797,"dependent_packages_count":0.947869886686163,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":null,"average":0.6523138994277676},"purl":"pkg:npm/expo-system-ui","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-system-ui","docker_dependents_count":2,"docker_downloads_count":4833,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-system-ui","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-system-ui/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-system-ui/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-system-ui/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-system-ui/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-system-ui/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-system-ui/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-system-ui/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T14:00:46.477Z","updated_at":"2026-04-02T14:00:46.477Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T13:01:34.048Z","updated_at":"2026-02-26T13:01:34.048Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T21:03:18.827Z","updated_at":"2022-11-08T21:03:18.827Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T21:03:18.883Z","updated_at":"2022-11-08T21:03:18.883Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T21:03:19.103Z","updated_at":"2022-11-08T21:03:19.103Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T21:03:19.287Z","updated_at":"2022-11-08T21:03:19.287Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T13:55:05.036Z","updated_at":"2025-09-20T13:55:05.036Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T21:03:19.392Z","updated_at":"2022-11-08T21:03:19.392Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T21:03:19.580Z","updated_at":"2022-11-08T21:03:19.580Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T15:00:29.475Z","updated_at":"2026-08-01T15:00:29.475Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-19T21:14:41.520Z","updated_at":"2024-08-19T21:14:41.520Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-19T21:14:41.176Z","updated_at":"2024-08-19T21:14:41.176Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695645,"name":"expo-gl","ecosystem":"npm","description":"Provides GLView that acts as OpenGL ES render target and gives GL context object implementing WebGL 2.0 specification.","homepage":"https://docs.expo.dev/versions/latest/sdk/gl-view/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","gl","glview","webgl"],"namespace":null,"versions_count":281,"first_release_published_at":"2023-11-23T16:15:22.435Z","latest_release_published_at":"2026-07-15T10:03:33.691Z","latest_release_number":"57.0.2","last_synced_at":"2026-09-01T19:11:45.298Z","created_at":"2022-04-09T15:17:23.046Z","updated_at":"2026-09-01T19:11:45.298Z","registry_url":"https://www.npmjs.com/package/expo-gl","install_command":"npm install expo-gl","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"prebuild":"9.2.0-prebuild.0","sdk-50":"13.6.0","sdk-51":"14.0.2","canary-sdk-55":"55.0.10-canary-20260429-a5e59cf","sdk-56":"56.0.6","canary-sdk-56":"56.0.6-canary-20260701-9100865","next":"57.0.2","latest":"57.0.2","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2024-04-22T12:25:10.000Z","size":2999444,"stargazers_count":28978,"open_issues_count":670,"forks_count":4626,"subscribers_count":286,"default_branch":"main","last_synced_at":"2024-04-22T12:26:42.119Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2024-04-23T12:41:36.546Z","dependencies_parsed_at":"2024-04-23T12:51:47.000Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":20842,"total_committers":1306,"mean_commits":15.95865237366003,"dds":0.8886863064964975,"last_synced_commit":"18e2e95c53e01de224ecc534467a447c6bd3afd7"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":211565865,"owners_count":15316042,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":405,"last_synced_at":"2024-04-12T10:03:26.593Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/expo","funding_links":[],"total_stars":69025,"followers":1408,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2024-04-12T10:05:06.678Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[]},"repo_metadata_updated_at":"2024-09-07T23:08:30.895Z","dependent_packages_count":54,"downloads":1108955,"downloads_period":"last-month","dependent_repos_count":10056,"rankings":{"downloads":1.2814972236812918,"dependent_repos_count":0.26389682277880133,"dependent_packages_count":0.5825632264615743,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":null,"average":0.6571379180236593},"purl":"pkg:npm/expo-gl","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-gl","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-gl","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-gl/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-09-07T14:39:14.303Z","issues_count":8598,"pull_requests_count":7990,"avg_time_to_close_issue":5670811.003374036,"avg_time_to_close_pull_request":1790107.427569694,"issues_closed_count":6203,"pull_requests_closed_count":5847,"pull_request_authors_count":579,"issue_authors_count":2625,"avg_comments_per_issue":6.468946266573622,"avg_comments_per_pull_request":1.105006257822278,"merged_pull_requests_count":5216,"bot_issues_count":0,"bot_pull_requests_count":117,"past_year_issues_count":4794,"past_year_pull_requests_count":6197,"past_year_avg_time_to_close_issue":1131974.8690400508,"past_year_avg_time_to_close_pull_request":448134.92391304346,"past_year_issues_closed_count":3139,"past_year_pull_requests_closed_count":4692,"past_year_pull_request_authors_count":449,"past_year_issue_authors_count":1687,"past_year_avg_comments_per_issue":3.0963704630788484,"past_year_avg_comments_per_pull_request":1.0587380990802,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":85,"past_year_merged_pull_requests_count":4306,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":808,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":498,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"byCedric","count":468,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"Simek","count":381,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"tsapeta","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":286,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":148,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":110,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":67,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"ide","count":37,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"szdziedzic","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"kbrandwijk","count":19,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"kitten","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"betomoedano","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"tchayen","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"}],"active_maintainers":[{"login":"amandeepmittal","count":696,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":430,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":418,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"wschurman","count":362,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"Simek","count":344,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"tsapeta","count":298,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":250,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":134,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":56,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":37,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"szdziedzic","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"ide","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"kitten","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"kbrandwijk","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"betomoedano","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"tchayen","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-gl/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-gl/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-gl/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-gl/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-gl/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-gl/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T00:00:27.752Z","updated_at":"2026-04-03T00:00:27.752Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-08T21:03:17.273Z","updated_at":"2022-11-08T21:03:17.273Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T21:03:18.729Z","updated_at":"2022-11-08T21:03:18.729Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T21:03:19.094Z","updated_at":"2022-11-08T21:03:19.094Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T21:03:19.244Z","updated_at":"2022-11-08T21:03:19.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T21:03:19.304Z","updated_at":"2022-11-08T21:03:19.304Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-08T21:03:19.326Z","updated_at":"2022-11-08T21:03:19.326Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T21:03:19.379Z","updated_at":"2022-11-08T21:03:19.379Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T21:03:19.534Z","updated_at":"2022-11-08T21:03:19.534Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T11:00:37.375Z","updated_at":"2026-08-01T11:00:37.375Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:30:35.694Z","updated_at":"2024-01-27T00:30:35.694Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:16:24.471Z","updated_at":"2024-06-26T18:16:24.471Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695584,"name":"expo-dev-menu-interface","ecosystem":"npm","description":"Interface for expo-dev-menu","homepage":"https://docs.expo.dev","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","react-native","dev-menu","dev","menu","interface"],"namespace":null,"versions_count":202,"first_release_published_at":"2023-11-23T16:14:39.026Z","latest_release_published_at":"2026-06-25T19:33:46.404Z","latest_release_number":"57.0.0","last_synced_at":"2026-09-01T19:12:08.249Z","created_at":"2022-04-09T15:17:19.745Z","updated_at":"2026-09-01T19:12:08.249Z","registry_url":"https://www.npmjs.com/package/expo-dev-menu-interface","install_command":"npm install expo-dev-menu-interface","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"1.7.2","sdk-51":"1.8.3","canary-sdk-55":"55.0.2-canary-20260429-a5e59cf","next":"57.0.0","latest":"57.0.0","canary-sdk-56":"56.0.2-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-29T14:04:37.678Z","dependent_packages_count":3,"downloads":15406545,"downloads_period":"last-month","dependent_repos_count":1377,"rankings":{"downloads":0.3503734814603786,"dependent_repos_count":0.5599866861502564,"dependent_packages_count":5.748726153199633,"stargazers_count":0.6031767690449568,"forks_count":0.5481971922735139,"docker_downloads_count":1.581885129977167,"average":1.5653909020176509},"purl":"pkg:npm/expo-dev-menu-interface","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-dev-menu-interface","docker_dependents_count":2,"docker_downloads_count":4073,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-dev-menu-interface","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-dev-menu-interface/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-29T11:47:15.798Z","issues_count":7173,"pull_requests_count":16787,"avg_time_to_close_issue":4984450.26026216,"avg_time_to_close_pull_request":1687856.7081740664,"issues_closed_count":5796,"pull_requests_closed_count":13604,"pull_request_authors_count":1494,"issue_authors_count":4942,"avg_comments_per_issue":4.503694409591524,"avg_comments_per_pull_request":1.6120807767915648,"merged_pull_requests_count":11855,"bot_issues_count":1,"bot_pull_requests_count":220,"past_year_issues_count":679,"past_year_pull_requests_count":1982,"past_year_avg_time_to_close_issue":1412504.5333333334,"past_year_avg_time_to_close_pull_request":721037.1230342275,"past_year_issues_closed_count":390,"past_year_pull_requests_closed_count":1081,"past_year_pull_request_authors_count":391,"past_year_issue_authors_count":549,"past_year_avg_comments_per_issue":2.6318114874815906,"past_year_avg_comments_per_pull_request":2.213420787083754,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":40,"past_year_merged_pull_requests_count":845,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":552,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":161,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"expo-bot","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":193,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":93,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"hirbod","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-menu-interface/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-menu-interface/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-menu-interface/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-menu-interface/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-menu-interface/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-dev-menu-interface/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T01:01:04.930Z","updated_at":"2026-04-03T01:01:04.930Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-12T07:20:41.219Z","updated_at":"2022-11-12T07:20:41.219Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T07:20:41.012Z","updated_at":"2022-11-12T07:20:41.012Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T07:20:41.052Z","updated_at":"2022-11-12T07:20:41.052Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T07:20:41.174Z","updated_at":"2022-11-12T07:20:41.174Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T07:20:41.368Z","updated_at":"2022-11-12T07:20:41.368Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-12T07:20:41.384Z","updated_at":"2022-11-12T07:20:41.384Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T07:20:41.467Z","updated_at":"2022-11-12T07:20:41.467Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T07:20:41.604Z","updated_at":"2022-11-12T07:20:41.604Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T10:06:59.762Z","updated_at":"2026-08-01T10:06:59.762Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:30:49.068Z","updated_at":"2024-01-27T00:30:49.068Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:35.915Z","updated_at":"2024-06-26T18:19:35.915Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695487,"name":"expo","ecosystem":"npm","description":"The Expo SDK","homepage":"https://github.com/expo/expo/tree/main/packages/expo","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo"],"namespace":null,"versions_count":964,"first_release_published_at":"2013-05-27T20:07:17.762Z","latest_release_published_at":"2026-09-01T16:19:14.919Z","latest_release_number":"57.0.19","last_synced_at":"2026-09-02T11:27:21.658Z","created_at":"2022-04-09T15:17:14.084Z","updated_at":"2026-09-03T01:25:04.637Z","registry_url":"https://www.npmjs.com/package/expo","install_command":"npm install expo","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-52":"52.0.49","sdk-53":"53.0.27","canary-sdk-55":"55.0.3-canary-20260429-a5e59cf","canary-sdk-56":"56.0.6-canary-20260701-9100865","canary":"58.0.0-canary-20260902-26df09e","sdk-54":"54.0.37","sdk-56":"56.0.21","sdk-55":"55.0.31","latest":"57.0.19","next":"57.0.19"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-01T21:24:11.710Z","dependent_packages_count":1965,"downloads":34086477,"downloads_period":"last-month","dependent_repos_count":165704,"rankings":{"downloads":0.19639963691209772,"dependent_repos_count":0.08539864241444835,"dependent_packages_count":0.045026807760242454,"stargazers_count":0.6035957132808298,"forks_count":0.5493163501280407,"docker_downloads_count":0.8445167766737949,"average":0.3873756545282423},"purl":"pkg:npm/expo","advisories":[{"uuid":"GSA_kwCzR0hTQS13cjVnLXE0OWctNTQ4d84AAy7r","url":"https://github.com/advisories/GHSA-wr5g-q49g-548w","title":"Expo SDK has an OAuth vulnerability","description":"A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the \"Expo AuthSession Redirect Proxy\" for social sign-in. This can be achieved once a victim clicks a malicious link. The link itself may be sent to the victim in various ways (including email, text message, an attacker-controlled website, etc).","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-04-24T06:31:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.6,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-28131","https://blog.expo.dev/security-advisory-for-developers-using-authsessions-useproxy-options-and-auth-expo-io-e470fe9346df","https://www.darkreading.com/endpoint/oauth-flaw-in-expo-platform-affects-hundreds-of-third-party-sites-apps","https://github.com/advisories/GHSA-wr5g-q49g-548w"],"source_kind":"github","identifiers":["GHSA-wr5g-q49g-548w","CVE-2023-28131"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-10-15T19:00:11.795Z","updated_at":"2026-09-03T00:05:03.731Z","epss_percentage":0.23165,"epss_percentile":0.97639,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cjVnLXE0OWctNTQ4d84AAy7r","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13cjVnLXE0OWctNTQ4d84AAy7r","packages":[{"ecosystem":"npm","package_name":"expo","versions":[{"first_patched_version":"48.0.0","vulnerable_version_range":"\u003c 48.0.0"}],"purl":"pkg:npm/expo"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cjVnLXE0OWctNTQ4d84AAy7r/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yd3g5LXdxajgtdnI3N84AAluo","url":"https://github.com/advisories/GHSA-rwx9-wqj8-vr77","title":"Expo on iOS is insecure due incorrect security attribute application","description":"secure-store in Expo through 9.1.0 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHEN_UNLOCKED_THIS_DEVICE_ONLY is used.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-05-24T17:26:43.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2020-24653","https://github.com/expo/expo/pull/9264","https://github.com/expo/expo/commit/1d82bf07fae2c96273e9189997e521359cffc1a9#diff-5b2820f378da980bd8a8185e2e1b2f9ce085d834534483f29c67932f282cc5c9","https://github.com/expo/expo/blob/main/packages/expo-secure-store/CHANGELOG.md","https://github.com/advisories/GHSA-rwx9-wqj8-vr77"],"source_kind":"github","identifiers":["GHSA-rwx9-wqj8-vr77","CVE-2020-24653"],"repository_url":"https://github.com/expo/expo","blast_radius":0.0,"created_at":"2022-12-21T16:11:59.269Z","updated_at":"2026-09-03T00:13:00.883Z","epss_percentage":0.0117,"epss_percentile":0.64568,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yd3g5LXdxajgtdnI3N84AAluo","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yd3g5LXdxajgtdnI3N84AAluo","packages":[{"ecosystem":"npm","package_name":"expo","versions":[{"first_patched_version":"9.1.0","vulnerable_version_range":"\u003c 9.1.0"}],"purl":"pkg:npm/expo","statistics":{"dependent_packages_count":1965,"dependent_repos_count":165704,"downloads":34086477,"downloads_period":"last-month"},"affected_versions":["0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","1.0.0"],"unaffected_versions":["14.0.0","14.0.1","14.0.2","15.0.0","15.0.1","15.0.2","15.1.2","15.1.3","16.0.0","17.0.0","18.0.0","18.0.1","18.0.2","18.0.3","18.0.4","18.0.5","18.0.6","18.0.8","18.0.9","19.0.0","19.0.1","20.0.0","20.0.1","20.0.2","20.0.3","20.0.4","20.0.5","20.1.0","20.1.1","20.1.2","20.1.3","20.1.4","21.0.0","21.0.1","21.0.2","21.0.3","22.0.0","22.0.1","22.0.2","22.0.3","22.0.4","22.1.0","23.0.0","23.0.1","23.0.2","23.0.3","23.0.4","23.0.5","23.0.6","23.1.0","23.1.1","24.0.0","24.0.1","24.0.2","24.0.3","24.1.0","24.1.1","25.0.0","25.0.1","25.1.0","25.1.1","25.1.2","26.0.0","26.1.0","26.1.1","27.0.0","27.0.1","27.0.2","27.1.0","27.1.1","28.0.0","28.0.1","29.0.0","29.0.1","30.0.0","30.0.1","30.0.2","31.0.0","31.0.1","31.0.2","31.0.3","31.0.4","31.0.5","31.0.6","32.0.0","32.0.1","32.0.2","32.0.3","32.0.4","32.0.5","32.0.6","33.0.0","33.0.1","33.0.2","33.0.3","33.0.4","33.0.5","33.0.6","33.0.7","34.0.1","34.0.2","34.0.3","34.0.4","35.0.0","35.0.1","36.0.0","36.0.1","36.0.2","37.0.0","37.0.1","37.0.2","37.0.3","37.0.4","37.0.5","37.0.6","37.0.7","37.0.8","37.0.9","37.0.10","37.0.11","37.0.12","38.0.0","38.0.1","38.0.2","38.0.3","38.0.4","38.0.5","38.0.6","38.0.7","38.0.8","38.0.9","38.0.10","38.0.11","39.0.0","39.0.1","39.0.2","39.0.3","39.0.4","39.0.5","40.0.0","40.0.1","41.0.0","41.0.1","42.0.0","42.0.1","42.0.2","42.0.3","42.0.4","42.0.5","43.0.0","43.0.1","43.0.2","43.0.3","43.0.4","43.0.5","44.0.0","44.0.1","44.0.2","44.0.3","44.0.4","44.0.5","44.0.6","45.0.0","45.0.1","45.0.2","45.0.3","45.0.4","45.0.5","45.0.6","45.0.7","45.0.8","46.0.0","46.0.1","46.0.2","46.0.3","46.0.4","46.0.5","46.0.6","46.0.7","46.0.8","46.0.9","46.0.10","46.0.11","46.0.12","46.0.13","46.0.14","46.0.15","46.0.16","46.0.17","46.0.18","46.0.19","46.0.20","46.0.21","47.0.0","47.0.1","47.0.2","47.0.3","47.0.4","47.0.5","47.0.6","47.0.7","47.0.8","47.0.9","47.0.10","47.0.11","47.0.12","47.0.13","47.0.14","48.0.0","48.0.1","48.0.2","48.0.3","48.0.4","48.0.5","48.0.6","48.0.7","48.0.8","48.0.9","48.0.10","48.0.11","48.0.12","48.0.13","48.0.14","48.0.15","48.0.16","48.0.17","48.0.18","48.0.19","48.0.20","48.0.21","49.0.0","49.0.1","49.0.2","49.0.3","49.0.4","49.0.5","49.0.6","49.0.7","49.0.8","49.0.9","49.0.10","49.0.11","49.0.12","49.0.13","49.0.14","49.0.15","49.0.16","49.0.17","49.0.18","49.0.19","49.0.20","49.0.21","49.0.22","49.0.23","50.0.0","50.0.1","50.0.2","50.0.3","50.0.4","50.0.5","50.0.6","50.0.7","50.0.8","50.0.9","50.0.10","50.0.11","50.0.12","50.0.13","50.0.14","50.0.15","50.0.16","50.0.17","50.0.18","50.0.19","50.0.20","50.0.21","51.0.0","51.0.1","51.0.2","51.0.3","51.0.4","51.0.5","51.0.6","51.0.7","51.0.8","51.0.9","51.0.10","51.0.11","51.0.12","51.0.13","51.0.14","51.0.15","51.0.16","51.0.17","51.0.18","51.0.19","51.0.20","51.0.21","51.0.22","51.0.23","51.0.24","51.0.25","51.0.26","51.0.27","51.0.28","51.0.29","51.0.30","51.0.31","51.0.32","51.0.33","51.0.34","51.0.35","51.0.36","51.0.37","51.0.38","51.0.39","52.0.0","52.0.1","52.0.2","52.0.3","52.0.4","52.0.5","52.0.6","52.0.7","52.0.8","52.0.9","52.0.10","52.0.11","52.0.12","52.0.13","52.0.14","52.0.15","52.0.16","52.0.17","52.0.18","52.0.19","52.0.20","52.0.21","52.0.22","52.0.23","52.0.24","52.0.25","52.0.26","52.0.27","52.0.28","52.0.29","52.0.30","52.0.31","52.0.32","52.0.33","52.0.34","52.0.35","52.0.36","52.0.37","52.0.38","52.0.39","52.0.40","52.0.41","52.0.42","52.0.43","52.0.44","52.0.45","52.0.46","52.0.47","52.0.48","52.0.49","53.0.0","53.0.1","53.0.2","53.0.3","53.0.4","53.0.5","53.0.6","53.0.7","53.0.8","53.0.9","53.0.10","53.0.11","53.0.12","53.0.13","53.0.14","53.0.15","53.0.16","53.0.17","53.0.18","53.0.19","53.0.20","53.0.21","53.0.22","53.0.23","53.0.24","53.0.25","53.0.26","53.0.27","54.0.0","54.0.1","54.0.2","54.0.3","54.0.4","54.0.5","54.0.6","54.0.7","54.0.8","54.0.9","54.0.10","54.0.11","54.0.12","54.0.13","54.0.14","54.0.15","54.0.16","54.0.17","54.0.18","54.0.19","54.0.20","54.0.21","54.0.22","54.0.23","54.0.24","54.0.25","54.0.26","54.0.27","54.0.28","54.0.29","54.0.30","54.0.31","54.0.32","54.0.33","54.0.34","54.0.35","54.0.36","54.0.37","55.0.0","55.0.1","55.0.2","55.0.3","55.0.4","55.0.5","55.0.6","55.0.7","55.0.8","55.0.9","55.0.10","55.0.11","55.0.12","55.0.13","55.0.14","55.0.15","55.0.16","55.0.17","55.0.18","55.0.19","55.0.20","55.0.21","55.0.22","55.0.23","55.0.24","55.0.25","55.0.26","55.0.27","55.0.28","55.0.29","55.0.30","55.0.31","56.0.0","56.0.1","56.0.2","56.0.3","56.0.4","56.0.5","56.0.6","56.0.7","56.0.8","56.0.9","56.0.10","56.0.11","56.0.12","56.0.13","56.0.14","56.0.15","56.0.16","56.0.17","56.0.18","56.0.19","56.0.20","56.0.21","57.0.0","57.0.1","57.0.2","57.0.3","57.0.4","57.0.5","57.0.6","57.0.7","57.0.8","57.0.9","57.0.10","57.0.11","57.0.12","57.0.13","57.0.14","57.0.15","57.0.16","57.0.17","57.0.18"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yd3g5LXdxajgtdnI3N84AAluo/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo","docker_dependents_count":48,"docker_downloads_count":177373,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-05-14T00:13:18.238Z","updated_at":"2026-05-14T00:13:18.238Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T20:30:43.657Z","updated_at":"2026-02-25T20:30:43.657Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T06:01:33.958Z","updated_at":"2022-11-08T06:01:33.958Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T06:01:47.513Z","updated_at":"2022-11-08T06:01:47.513Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T06:01:57.227Z","updated_at":"2022-11-08T06:01:57.227Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T06:02:04.929Z","updated_at":"2022-11-08T06:02:04.929Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T19:11:52.822Z","updated_at":"2025-09-20T19:11:52.822Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T06:02:10.971Z","updated_at":"2022-11-08T06:02:10.971Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T06:02:22.284Z","updated_at":"2022-11-08T06:02:22.284Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-12T14:07:44.778Z","updated_at":"2026-08-12T14:07:44.778Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T06:13:09.559Z","updated_at":"2024-01-27T06:13:09.559Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:18:52.821Z","updated_at":"2024-06-26T18:18:52.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14143302,"name":"org.mvnpm:expo-font","ecosystem":"maven","description":"Load fonts at runtime and use them in React Native components.","homepage":"https://docs.expo.dev/versions/latest/sdk/font/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":[],"namespace":"org.mvnpm","versions_count":13,"first_release_published_at":"2026-03-24T05:51:50.000Z","latest_release_published_at":"2026-08-29T02:12:07.000Z","latest_release_number":"57.0.2","last_synced_at":"2026-09-01T19:37:42.514Z","created_at":"2026-03-28T21:00:27.912Z","updated_at":"2026-09-01T19:37:42.514Z","registry_url":"https://central.sonatype.com/artifact/org.mvnpm/expo-font/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.mvnpm/expo-font/","metadata":{},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T18:22:04.261Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":29.673509187807873,"dependent_packages_count":42.42110430437969,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":36.04730674609378},"purl":"pkg:maven/org.mvnpm/expo-font","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.mvnpm:expo-font","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.mvnpm:expo-font","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.mvnpm:expo-font/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-font/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-font/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-font/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-font/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-font/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-font/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":620556,"maintainers_count":0,"namespaces_count":82431,"keywords_count":36859,"github":"maven-central","metadata":{"funded_packages_count":48141,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-09-02T05:05:01.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":14109685,"name":"org.mvnpm.at.expo:metro-runtime","ecosystem":"maven","description":"Tools for making advanced Metro bundler features work","homepage":"https://github.com/expo/expo/tree/main/packages/@expo/metro-runtime","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":[],"namespace":"org.mvnpm.at.expo","versions_count":26,"first_release_published_at":"2026-03-24T04:12:52.000Z","latest_release_published_at":"2026-08-28T02:20:05.000Z","latest_release_number":"57.0.14","last_synced_at":"2026-09-01T19:38:16.930Z","created_at":"2026-03-24T04:31:10.569Z","updated_at":"2026-09-01T19:38:16.930Z","registry_url":"https://central.sonatype.com/artifact/org.mvnpm.at.expo/metro-runtime/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.mvnpm.at.expo/metro-runtime/","metadata":{},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-24T10:42:28.680Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":29.74441852940383,"dependent_packages_count":42.52304477511333,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":36.133731652258575},"purl":"pkg:maven/org.mvnpm.at.expo/metro-runtime","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.mvnpm.at.expo:metro-runtime","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.mvnpm.at.expo:metro-runtime","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.mvnpm.at.expo:metro-runtime/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-24T04:00:11.685Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":658,"past_year_pull_requests_count":1893,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":637801.2187802517,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1033,"past_year_pull_request_authors_count":365,"past_year_issue_authors_count":537,"past_year_avg_comments_per_issue":2.5182370820668694,"past_year_avg_comments_per_pull_request":2.0718436344426836,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":810,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-runtime/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-runtime/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-runtime/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-runtime/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-runtime/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.expo:metro-runtime/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":620556,"maintainers_count":0,"namespaces_count":82431,"keywords_count":36859,"github":"maven-central","metadata":{"funded_packages_count":48141,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-09-02T05:05:01.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":14144524,"name":"org.mvnpm:expo-constants","ecosystem":"maven","description":"Provides system information that remains constant throughout the lifetime of your app.","homepage":"https://docs.expo.dev/versions/latest/sdk/constants/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":[],"namespace":"org.mvnpm","versions_count":30,"first_release_published_at":"2026-03-24T05:33:50.000Z","latest_release_published_at":"2026-08-29T02:12:06.000Z","latest_release_number":"57.0.16","last_synced_at":"2026-09-01T19:38:27.627Z","created_at":"2026-03-29T00:30:23.888Z","updated_at":"2026-09-01T19:38:27.628Z","registry_url":"https://central.sonatype.com/artifact/org.mvnpm/expo-constants/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.mvnpm/expo-constants/","metadata":{},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T20:04:44.815Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":29.673509187807873,"dependent_packages_count":42.42110430437969,"stargazers_count":0.4866879015133188,"forks_count":0.7158360884874876,"docker_downloads_count":null,"average":18.324284370547094},"purl":"pkg:maven/org.mvnpm/expo-constants","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.mvnpm:expo-constants","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.mvnpm:expo-constants","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.mvnpm:expo-constants/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-22T18:06:09.698Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":660,"past_year_pull_requests_count":1900,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":638702.7996146436,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1038,"past_year_pull_request_authors_count":367,"past_year_issue_authors_count":539,"past_year_avg_comments_per_issue":2.5106060606060607,"past_year_avg_comments_per_pull_request":2.071578947368421,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":813,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-constants/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-constants/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-constants/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-constants/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-constants/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:expo-constants/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":620556,"maintainers_count":0,"namespaces_count":82431,"keywords_count":36859,"github":"maven-central","metadata":{"funded_packages_count":48141,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-09-02T05:05:01.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":14126427,"name":"expo-modules-rs","ecosystem":"npm","description":"Rust SDK for writing Expo native modules via direct JSI integration","homepage":"https://github.com/expo/expo","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-25T07:35:19.732Z","latest_release_published_at":"2026-03-25T07:35:19.732Z","latest_release_number":"0.0.1","last_synced_at":"2026-08-31T10:23:18.504Z","created_at":"2026-03-26T05:27:11.726Z","updated_at":"2026-08-31T10:23:18.504Z","registry_url":"https://www.npmjs.com/package/expo-modules-rs","install_command":"npm install expo-modules-rs","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"0.0.1"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T16:49:17.302Z","dependent_packages_count":0,"downloads":5,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":22.303966751324264,"dependent_packages_count":32.14940011370728,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":27.22668343251577},"purl":"pkg:npm/expo-modules-rs","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-modules-rs","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-modules-rs","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-modules-rs/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-rs/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-rs/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-rs/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-rs/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-rs/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-rs/codemeta","maintainers":[{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2026-03-26T05:27:16.957Z","updated_at":"2026-03-26T05:27:16.957Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":15070532,"name":"miaoda-expo-dev-menu-55","ecosystem":"npm","description":"Miaoda customized Expo Developer Menu for Expo SDK 55","homepage":"https://docs.expo.dev","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","react-native","dev-menu","dev","menu"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-08-30T05:50:35.535Z","latest_release_published_at":"2026-08-30T05:50:35.535Z","latest_release_number":"0.1.0","last_synced_at":"2026-08-31T09:22:16.010Z","created_at":"2026-08-30T05:51:06.063Z","updated_at":"2026-08-31T09:22:16.010Z","registry_url":"https://www.npmjs.com/package/miaoda-expo-dev-menu-55","install_command":"npm install miaoda-expo-dev-menu-55","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"0.1.0"},"contentPolicy":null},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":20.95681380568384,"dependent_packages_count":30.204604100699534,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":25.58070895319169},"purl":"pkg:npm/miaoda-expo-dev-menu-55","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/miaoda-expo-dev-menu-55","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/miaoda-expo-dev-menu-55","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/miaoda-expo-dev-menu-55/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/miaoda-expo-dev-menu-55/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/miaoda-expo-dev-menu-55/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/miaoda-expo-dev-menu-55/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/miaoda-expo-dev-menu-55/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/miaoda-expo-dev-menu-55/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/miaoda-expo-dev-menu-55/codemeta","maintainers":[{"uuid":"franckchen","login":"franckchen","name":null,"email":"franckchen@foxmail.com","url":null,"packages_count":185,"html_url":"https://www.npmjs.com/~franckchen","role":null,"created_at":"2026-08-30T05:51:06.249Z","updated_at":"2026-08-30T05:51:06.249Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/franckchen/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":8584768,"name":"av-expo-camera","ecosystem":"npm","description":"A React component that renders a preview for the device's either front or back camera. Camera's parameters like zoom, auto focus, white balance and flash mode are adjustable. With expo-camera, one can also take photos and record videos that are saved to t","homepage":"https://www.rxdirectsolutions.com","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","camera"],"namespace":null,"versions_count":69,"first_release_published_at":"2023-11-20T02:53:19.680Z","latest_release_published_at":"2025-07-08T20:21:54.248Z","latest_release_number":"0.4.5","last_synced_at":"2026-08-31T09:44:10.600Z","created_at":"2023-11-20T02:55:12.311Z","updated_at":"2026-08-31T09:44:10.600Z","registry_url":"https://www.npmjs.com/package/av-expo-camera","install_command":"npm install av-expo-camera","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"0.4.5"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T05:47:53.232Z","dependent_packages_count":1,"downloads":130,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":36.41686133110693,"dependent_packages_count":52.33487484939886,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":44.375868090252894},"purl":"pkg:npm/av-expo-camera","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/av-expo-camera","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/av-expo-camera","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/av-expo-camera/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/av-expo-camera/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/av-expo-camera/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/av-expo-camera/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/av-expo-camera/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/av-expo-camera/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/av-expo-camera/codemeta","maintainers":[{"uuid":"mrvis","login":"mrvis","name":null,"email":"visser@gmail.com","url":null,"packages_count":2,"html_url":"https://www.npmjs.com/~mrvis","role":null,"created_at":"2023-11-20T02:55:13.387Z","updated_at":"2023-11-20T02:55:13.387Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/mrvis/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14295833,"name":"@snapbox/pkg-screen-recorder","ecosystem":"npm","description":"My new module","homepage":"https://github.com/expo/expo#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","@snapbox/pkg-screen-recorder","SnapboxPkgScreenRecorder"],"namespace":"snapbox","versions_count":7,"first_release_published_at":"2026-04-21T07:07:38.318Z","latest_release_published_at":"2026-07-17T15:56:30.713Z","latest_release_number":"1.0.8","last_synced_at":"2026-08-31T09:47:34.894Z","created_at":"2026-04-22T00:45:07.949Z","updated_at":"2026-08-31T09:47:34.894Z","registry_url":"https://www.npmjs.com/package/@snapbox/pkg-screen-recorder","install_command":"npm install @snapbox/pkg-screen-recorder","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"1.0.8"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T17:23:54.615Z","dependent_packages_count":0,"downloads":58,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":21.97828585428068,"dependent_packages_count":31.679488114828295,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":26.828886984554487},"purl":"pkg:npm/%40snapbox/pkg-screen-recorder","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@snapbox/pkg-screen-recorder","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@snapbox/pkg-screen-recorder","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@snapbox/pkg-screen-recorder/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@snapbox%2Fpkg-screen-recorder/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@snapbox%2Fpkg-screen-recorder/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@snapbox%2Fpkg-screen-recorder/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@snapbox%2Fpkg-screen-recorder/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@snapbox%2Fpkg-screen-recorder/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@snapbox%2Fpkg-screen-recorder/codemeta","maintainers":[{"uuid":"gavinliu","login":"gavinliu","name":null,"email":"gavin6liu@gmail.com","url":null,"packages_count":29,"html_url":"https://www.npmjs.com/~gavinliu","role":null,"created_at":"2026-04-22T00:45:08.766Z","updated_at":"2026-04-22T00:45:08.766Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/gavinliu/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":930039,"name":"@expo/plist","ecosystem":"npm","description":"Mac OS X Plist parser/builder for Node.js and browsers","homepage":"https://github.com/expo/expo/tree/main/packages/@expo/plist#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["plist"],"namespace":"expo","versions_count":189,"first_release_published_at":"2024-01-09T15:49:41.451Z","latest_release_published_at":"2026-07-15T10:00:06.722Z","latest_release_number":"0.8.1","last_synced_at":"2026-09-01T21:15:38.923Z","created_at":"2022-04-07T17:09:23.451Z","updated_at":"2026-09-02T14:52:38.248Z","registry_url":"https://www.npmjs.com/package/@expo/plist","install_command":"npm install @expo/plist","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"0.1.0","sdk-51":"0.1.3","sdk-52":"0.2.2","canary-sdk-55":"0.5.3-canary-20260429-a5e59cf","sdk-55":"0.5.4","sdk-54":"0.4.9","canary-sdk-56":"0.7.1-canary-20260701-9100865","latest":"0.8.1","next":"0.8.1","canary":"0.8.2-canary-20260812-27f94d4"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T14:52:38.248Z","dependent_packages_count":23,"downloads":49806645,"downloads_period":"last-month","dependent_repos_count":73365,"rankings":{"downloads":0.1557764488661435,"dependent_repos_count":0.1202459652347441,"dependent_packages_count":1.2086155098376048,"stargazers_count":1.8231657921635824,"forks_count":1.7272751571915812,"docker_downloads_count":0.8323107385385563,"average":0.9778982686387021},"purl":"pkg:npm/%40expo/plist","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@expo/plist","docker_dependents_count":59,"docker_downloads_count":181683,"usage_url":"https://repos.ecosyste.ms/usage/npm/@expo/plist","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@expo/plist/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-02T09:00:15.712Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2334,"past_year_pull_requests_count":7985,"past_year_avg_time_to_close_issue":1617883.2351555137,"past_year_avg_time_to_close_pull_request":758908.2499658517,"past_year_issues_closed_count":2122,"past_year_pull_requests_closed_count":7321,"past_year_pull_request_authors_count":1007,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.8933161953727504,"past_year_avg_comments_per_pull_request":2.1552911709455227,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6121,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":870,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":595,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fplist/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fplist/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fplist/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fplist/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fplist/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fplist/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T07:12:56.992Z","updated_at":"2026-04-02T07:12:56.992Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T18:00:55.272Z","updated_at":"2026-02-26T18:00:55.272Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-18T15:36:05.025Z","updated_at":"2022-11-18T15:36:05.025Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-18T15:36:05.039Z","updated_at":"2022-11-18T15:36:05.039Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-18T15:36:05.092Z","updated_at":"2022-11-18T15:36:05.092Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-18T15:36:05.147Z","updated_at":"2022-11-18T15:36:05.147Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-18T15:36:05.162Z","updated_at":"2022-11-18T15:36:05.162Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-18T15:36:05.181Z","updated_at":"2022-11-18T15:36:05.181Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-18T15:36:05.304Z","updated_at":"2022-11-18T15:36:05.304Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-03T03:00:34.503Z","updated_at":"2026-08-03T03:00:34.503Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T06:12:45.860Z","updated_at":"2024-01-27T06:12:45.860Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T08:35:14.693Z","updated_at":"2024-06-26T08:35:14.693Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14929808,"name":"github.com/expo/expo","ecosystem":"go","description":null,"homepage":null,"licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/expo/expo","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-08-11T23:33:59.000Z","latest_release_published_at":"2026-08-11T23:33:59.000Z","latest_release_number":"v0.0.0-20260811233359-42c88e4f0e92","last_synced_at":"2026-08-31T11:21:42.066Z","created_at":"2026-08-12T00:32:02.171Z","updated_at":"2026-08-31T11:21:42.066Z","registry_url":"https://pkg.go.dev/github.com/expo/expo","install_command":"go get github.com/expo/expo","documentation_url":"https://pkg.go.dev/github.com/expo/expo#section-documentation","metadata":{},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T17:49:23.740Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.796011385411047,"dependent_packages_count":4.494101325906062,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.6450563556585545},"purl":"pkg:golang/github.com/expo/expo","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/expo/expo","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/expo/expo","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/expo/expo/dependencies","status":"removed","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fexpo%2Fexpo/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fexpo%2Fexpo/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fexpo%2Fexpo/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fexpo%2Fexpo/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fexpo%2Fexpo/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fexpo%2Fexpo/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2282215,"maintainers_count":0,"namespaces_count":839585,"keywords_count":126348,"github":"golang","metadata":{"funded_packages_count":70969,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-02T05:03:03.375Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":1695665,"name":"expo-image","ecosystem":"npm","description":"A cross-platform, performant image component for React Native and Expo with Web support","homepage":"https://docs.expo.dev/versions/latest/sdk/image/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native"],"namespace":null,"versions_count":291,"first_release_published_at":"2023-11-23T16:15:43.479Z","latest_release_published_at":"2026-09-01T16:18:57.999Z","latest_release_number":"57.0.4","last_synced_at":"2026-09-01T16:53:48.247Z","created_at":"2022-04-09T15:17:24.094Z","updated_at":"2026-09-01T22:03:47.449Z","registry_url":"https://www.npmjs.com/package/expo-image","install_command":"npm install expo-image","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"1.10.6","sdk-51":"1.12.9","sdk-52":"2.0.3","canary-sdk-55":"55.0.6-canary-20260429-a5e59cf","sdk-55":"55.0.11","canary-sdk-56":"56.0.10-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","next":"57.0.4","latest":"57.0.3","sdk-56":"56.0.12"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-01T22:03:47.449Z","dependent_packages_count":24,"downloads":17322793,"downloads_period":"last-month","dependent_repos_count":406,"rankings":{"downloads":0.5489134370147477,"dependent_repos_count":0.8590313687710238,"dependent_packages_count":4.421787968848049,"stargazers_count":0.6035957132808298,"forks_count":0.5493163501280407,"docker_downloads_count":null,"average":1.3965289676085382},"purl":"pkg:npm/expo-image","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-image","docker_dependents_count":1,"docker_downloads_count":60,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-image","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-image/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T18:30:29.131Z","updated_at":"2026-04-02T18:30:29.131Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-12T07:20:46.928Z","updated_at":"2022-11-12T07:20:46.928Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T07:20:46.603Z","updated_at":"2022-11-12T07:20:46.603Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T07:20:46.652Z","updated_at":"2022-11-12T07:20:46.652Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T07:20:46.864Z","updated_at":"2022-11-12T07:20:46.864Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T07:20:47.042Z","updated_at":"2022-11-12T07:20:47.042Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-12T07:20:47.118Z","updated_at":"2022-11-12T07:20:47.118Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T07:20:47.243Z","updated_at":"2022-11-12T07:20:47.243Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T07:20:47.356Z","updated_at":"2022-11-12T07:20:47.356Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T19:30:09.240Z","updated_at":"2026-08-01T19:30:09.240Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-02-05T06:49:52.266Z","updated_at":"2024-02-05T06:49:52.266Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:11.076Z","updated_at":"2024-06-26T18:19:11.076Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1243371,"name":"expo-firebase-recaptcha","ecosystem":"npm","description":"reCAPTCHA components for Firebase phone authentication","homepage":"https://docs.expo.dev/versions/latest/sdk/firebase-recaptcha/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","recaptcha","firebase-recaptcha","firebase-phone-auth"],"namespace":null,"versions_count":22,"first_release_published_at":"2020-04-06T21:34:14.969Z","latest_release_published_at":"2022-10-25T15:31:15.260Z","latest_release_number":"2.3.1","last_synced_at":"2026-09-02T16:43:24.074Z","created_at":"2022-04-08T14:42:38.796Z","updated_at":"2026-09-02T16:43:24.075Z","registry_url":"https://www.npmjs.com/package/expo-firebase-recaptcha","install_command":"npm install expo-firebase-recaptcha","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"2.3.1"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T08:35:36.042Z","dependent_packages_count":4,"downloads":7619,"downloads_period":"last-month","dependent_repos_count":206,"rankings":{"downloads":2.2026566268841403,"dependent_repos_count":1.0744498285565685,"dependent_packages_count":4.506936399663058,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":1.7813348195153398},"purl":"pkg:npm/expo-firebase-recaptcha","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-firebase-recaptcha","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-firebase-recaptcha","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-firebase-recaptcha/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-recaptcha/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-recaptcha/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-recaptcha/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-recaptcha/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-recaptcha/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-recaptcha/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T14:01:42.609Z","updated_at":"2026-04-03T14:01:42.609Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T12:31:20.731Z","updated_at":"2026-02-26T12:31:20.731Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T10:23:02.395Z","updated_at":"2022-11-12T10:23:02.395Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T10:23:02.637Z","updated_at":"2022-11-12T10:23:02.637Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T10:23:03.445Z","updated_at":"2022-11-12T10:23:03.445Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T10:23:04.886Z","updated_at":"2022-11-12T10:23:04.886Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T17:59:56.659Z","updated_at":"2025-09-20T17:59:56.659Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T10:23:06.266Z","updated_at":"2022-11-12T10:23:06.266Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T10:23:07.962Z","updated_at":"2022-11-12T10:23:07.962Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T16:30:17.741Z","updated_at":"2026-08-02T16:30:17.741Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:30:30.433Z","updated_at":"2024-01-27T00:30:30.433Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:10.787Z","updated_at":"2024-06-26T18:19:10.787Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695755,"name":"expo-network","ecosystem":"npm","description":"Provides useful information about the device's network such as its IP address, MAC address, and airplane mode status","homepage":"https://docs.expo.dev/versions/latest/sdk/network/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-network"],"namespace":null,"versions_count":238,"first_release_published_at":"2023-11-23T16:17:10.073Z","latest_release_published_at":"2026-07-15T10:05:12.601Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-01T22:25:18.422Z","created_at":"2022-04-09T15:17:28.732Z","updated_at":"2026-09-01T22:25:18.423Z","registry_url":"https://www.npmjs.com/package/expo-network","install_command":"npm install expo-network","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"5.8.0","sdk-51":"6.0.1","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.5-canary-20260701-9100865","next":"57.0.1","latest":"57.0.1","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.18"},"contentPolicy":null},"repo_metadata":{"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source platform for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2024-01-06T21:00:58.000Z","size":2870401,"stargazers_count":25602,"open_issues_count":654,"forks_count":4480,"subscribers_count":279,"default_branch":"main","last_synced_at":"2024-01-06T21:12:25.920Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2024-01-06T19:34:04.000Z","dependencies_parsed_at":"2023-12-27T21:13:14.111Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":20326,"total_committers":1266,"mean_commits":16.05529225908373,"dds":0.8868444356981207,"last_synced_commit":"04e54cdd499e737353027d7c612eed1cba86684f"},"previous_names":[],"tags_count":0,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":179535955,"owners_count":10829702,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":389,"last_synced_at":"2023-04-09T19:27:08.278Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/expo","created_at":"2022-11-02T16:30:00.841Z","updated_at":"2023-04-09T19:27:08.318Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[]},"repo_metadata_updated_at":"2024-01-06T21:15:11.464Z","dependent_packages_count":20,"downloads":4574361,"downloads_period":"last-month","dependent_repos_count":239,"rankings":{"downloads":0.7915348445972963,"dependent_repos_count":1.0155487867249462,"dependent_packages_count":1.1871470810421856,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":0.8233723909674723},"purl":"pkg:npm/expo-network","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-network","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-network","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-network/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-01-06T21:15:09.224Z","issues_count":3890,"pull_requests_count":3191,"avg_time_to_close_issue":6690078.259453388,"avg_time_to_close_pull_request":1365141.8880174293,"issues_closed_count":2668,"pull_requests_closed_count":2295,"pull_request_authors_count":215,"issue_authors_count":1277,"avg_comments_per_issue":7.9,"avg_comments_per_pull_request":0.8617988091507365,"merged_pull_requests_count":2068,"bot_issues_count":0,"bot_pull_requests_count":47,"past_year_issues_count":2915,"past_year_pull_requests_count":3113,"past_year_avg_time_to_close_issue":1807024.4306529951,"past_year_avg_time_to_close_pull_request":684530.2355056179,"past_year_issues_closed_count":1851,"past_year_pull_requests_closed_count":2225,"past_year_pull_request_authors_count":202,"past_year_issue_authors_count":989,"past_year_avg_comments_per_issue":4.286449399656947,"past_year_avg_comments_per_pull_request":0.807259877931256,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":47,"past_year_merged_pull_requests_count":2037,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues"},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-01T21:02:44.758Z","updated_at":"2026-04-01T21:02:44.758Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-12T07:20:47.292Z","updated_at":"2022-11-12T07:20:47.292Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T07:20:46.996Z","updated_at":"2022-11-12T07:20:46.996Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T07:20:47.038Z","updated_at":"2022-11-12T07:20:47.038Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T07:20:47.251Z","updated_at":"2022-11-12T07:20:47.251Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T07:20:47.373Z","updated_at":"2022-11-12T07:20:47.373Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-12T07:20:47.433Z","updated_at":"2022-11-12T07:20:47.433Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T07:20:47.493Z","updated_at":"2022-11-12T07:20:47.493Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T07:20:47.657Z","updated_at":"2022-11-12T07:20:47.657Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T10:00:39.436Z","updated_at":"2026-08-02T10:00:39.436Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2026-02-10T21:02:34.270Z","updated_at":"2026-02-10T21:02:34.270Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2026-02-10T21:02:34.448Z","updated_at":"2026-02-10T21:02:34.448Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695705,"name":"expo-linear-gradient","ecosystem":"npm","description":"Provides a React component that renders a gradient view.","homepage":"https://docs.expo.dev/versions/latest/sdk/linear-gradient/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","gradient"],"namespace":null,"versions_count":249,"first_release_published_at":"2023-11-23T16:16:00.948Z","latest_release_published_at":"2026-07-15T10:05:34.199Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-01T22:32:40.523Z","created_at":"2022-04-09T15:17:26.188Z","updated_at":"2026-09-01T22:32:40.523Z","registry_url":"https://www.npmjs.com/package/expo-linear-gradient","install_command":"npm install expo-linear-gradient","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"12.7.2","sdk-51":"13.0.2","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.5-canary-20260701-9100865","next":"57.0.1","latest":"57.0.1","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-26T12:56:14.905Z","dependent_packages_count":270,"downloads":13468390,"downloads_period":"last-month","dependent_repos_count":87845,"rankings":{"downloads":0.32080154168487335,"dependent_repos_count":0.10304975743112277,"dependent_packages_count":0.18704473521611023,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":0.8716233628001299,"average":0.4341917732675282},"purl":"pkg:npm/expo-linear-gradient","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-linear-gradient","docker_dependents_count":4,"docker_downloads_count":1020,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-linear-gradient","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-linear-gradient/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-25T16:14:27.710Z","issues_count":7150,"pull_requests_count":16680,"avg_time_to_close_issue":4993141.988060218,"avg_time_to_close_pull_request":1690468.2896444902,"issues_closed_count":5777,"pull_requests_closed_count":13558,"pull_request_authors_count":1473,"issue_authors_count":4926,"avg_comments_per_issue":4.502797202797203,"avg_comments_per_pull_request":1.6036570743405276,"merged_pull_requests_count":11821,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":672,"past_year_pull_requests_count":1938,"past_year_avg_time_to_close_issue":1326238.955613577,"past_year_avg_time_to_close_pull_request":712212.9384328359,"past_year_issues_closed_count":383,"past_year_pull_requests_closed_count":1072,"past_year_pull_request_authors_count":378,"past_year_issue_authors_count":547,"past_year_avg_comments_per_issue":2.5580357142857144,"past_year_avg_comments_per_pull_request":2.1393188854489162,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1665,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1097,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":305,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":176,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":115,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":95,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-linear-gradient/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-linear-gradient/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-linear-gradient/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-linear-gradient/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-linear-gradient/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-linear-gradient/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T12:31:07.981Z","updated_at":"2026-04-03T12:31:07.981Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-28T03:01:38.054Z","updated_at":"2026-02-28T03:01:38.054Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T11:27:40.236Z","updated_at":"2022-11-10T11:27:40.236Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T11:27:40.247Z","updated_at":"2022-11-10T11:27:40.247Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T11:27:40.253Z","updated_at":"2022-11-10T11:27:40.253Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T11:27:40.257Z","updated_at":"2022-11-10T11:27:40.257Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T11:27:40.259Z","updated_at":"2022-11-10T11:27:40.259Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T11:27:40.262Z","updated_at":"2022-11-10T11:27:40.262Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T11:27:40.276Z","updated_at":"2022-11-10T11:27:40.276Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T05:00:51.940Z","updated_at":"2026-08-01T05:00:51.940Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-19T21:23:32.123Z","updated_at":"2024-08-19T21:23:32.123Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-19T21:23:32.036Z","updated_at":"2024-08-19T21:23:32.036Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":2501796,"name":"unimodules-constants-interface","ecosystem":"npm","description":"An interface for constants modules.","homepage":"https://github.com/expo/expo/tree/master/packages/unimodules-constants-interface","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["unimodules","constants"],"namespace":null,"versions_count":16,"first_release_published_at":"2019-03-14T19:05:46.890Z","latest_release_published_at":"2021-03-10T01:45:13.583Z","latest_release_number":"6.1.0","last_synced_at":"2026-09-01T22:59:55.398Z","created_at":"2022-04-10T02:42:02.353Z","updated_at":"2026-09-01T22:59:55.398Z","registry_url":"https://www.npmjs.com/package/unimodules-constants-interface","install_command":"npm install unimodules-constants-interface","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"6.1.0"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2024-10-29T09:37:15.000Z","size":3134836,"stargazers_count":33866,"open_issues_count":684,"forks_count":5424,"subscribers_count":301,"default_branch":"main","last_synced_at":"2024-10-29T09:46:34.440Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2024-10-29T09:23:34.000Z","dependencies_parsed_at":"2024-04-23T12:51:47.000Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":20842,"total_committers":1306,"mean_commits":15.95865237366003,"dds":0.8886863064964975,"last_synced_commit":"18e2e95c53e01de224ecc534467a447c6bd3afd7"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":222061317,"owners_count":16924680,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":405,"last_synced_at":"2024-04-12T10:03:26.593Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/expo","funding_links":[],"total_stars":69025,"followers":1408,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2024-04-12T10:05:06.678Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[]},"repo_metadata_updated_at":"2024-10-29T16:12:39.945Z","dependent_packages_count":7,"downloads":26704,"downloads_period":"last-month","dependent_repos_count":83453,"rankings":{"downloads":1.0111993528503407,"dependent_repos_count":0.10551474923650962,"dependent_packages_count":2.7697266450909077,"stargazers_count":0.5669562089981925,"forks_count":0.5222798020344991,"docker_downloads_count":0.872576444973652,"average":0.9747088671973504},"purl":"pkg:npm/unimodules-constants-interface","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/unimodules-constants-interface","docker_dependents_count":2,"docker_downloads_count":960,"usage_url":"https://repos.ecosyste.ms/usage/npm/unimodules-constants-interface","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/unimodules-constants-interface/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-10-29T13:50:42.912Z","issues_count":8982,"pull_requests_count":8714,"avg_time_to_close_issue":5703193.884545729,"avg_time_to_close_pull_request":1791598.0808654288,"issues_closed_count":6606,"pull_requests_closed_count":6517,"pull_request_authors_count":634,"issue_authors_count":2880,"avg_comments_per_issue":6.536072144288577,"avg_comments_per_pull_request":1.190842322699105,"merged_pull_requests_count":5820,"bot_issues_count":0,"bot_pull_requests_count":130,"past_year_issues_count":4713,"past_year_pull_requests_count":6390,"past_year_avg_time_to_close_issue":1192008.8331729227,"past_year_avg_time_to_close_pull_request":415860.2536217099,"past_year_issues_closed_count":3110,"past_year_pull_requests_closed_count":4901,"past_year_pull_request_authors_count":471,"past_year_issue_authors_count":1688,"past_year_avg_comments_per_issue":3.24124761298536,"past_year_avg_comments_per_pull_request":1.189827856025039,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":86,"past_year_merged_pull_requests_count":4501,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":853,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"wschurman","count":538,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"alanjhughes","count":520,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":507,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"Simek","count":420,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"tsapeta","count":405,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":311,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":123,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":69,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"ide","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"szdziedzic","count":33,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"kitten","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"betomoedano","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"kbrandwijk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"tchayen","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"}],"active_maintainers":[{"login":"amandeepmittal","count":673,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"byCedric","count":425,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"alanjhughes","count":415,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":379,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"wschurman","count":360,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":313,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":249,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":147,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":91,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":56,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"szdziedzic","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"kitten","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"ide","count":19,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"betomoedano","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"tchayen","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-constants-interface/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-constants-interface/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-constants-interface/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-constants-interface/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-constants-interface/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/unimodules-constants-interface/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T07:02:39.470Z","updated_at":"2026-04-03T07:02:39.470Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-15T05:25:38.322Z","updated_at":"2022-11-15T05:25:38.322Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-15T05:25:38.394Z","updated_at":"2022-11-15T05:25:38.394Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-15T05:25:38.587Z","updated_at":"2022-11-15T05:25:38.587Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-15T05:25:38.673Z","updated_at":"2022-11-15T05:25:38.673Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-15T05:25:38.743Z","updated_at":"2022-11-15T05:25:38.743Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-15T05:25:38.878Z","updated_at":"2022-11-15T05:25:38.878Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-15T05:25:38.904Z","updated_at":"2022-11-15T05:25:38.904Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-15T05:25:39.021Z","updated_at":"2022-11-15T05:25:39.021Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T17:01:45.269Z","updated_at":"2026-08-01T17:01:45.269Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T06:13:17.882Z","updated_at":"2024-01-27T06:13:17.882Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-25T21:30:14.728Z","updated_at":"2024-06-25T21:30:14.728Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695507,"name":"expo-app-loading","ecosystem":"npm","description":"A React component that keeps the native splash screen visible.","homepage":"https://docs.expo.dev/versions/latest/sdk/app-loading","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-app-loading","app-loading"],"namespace":null,"versions_count":17,"first_release_published_at":"2020-11-17T04:55:07.358Z","latest_release_published_at":"2023-02-09T20:05:36.777Z","latest_release_number":"2.2.1","last_synced_at":"2026-08-31T09:54:18.330Z","created_at":"2022-04-09T15:17:14.974Z","updated_at":"2026-08-31T09:54:18.330Z","registry_url":"https://www.npmjs.com/package/expo-app-loading","install_command":"npm install expo-app-loading","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"2.1.1","next":"2.2.1"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T10:25:53.863Z","dependent_packages_count":80,"downloads":17720,"downloads_period":"last-month","dependent_repos_count":4576,"rankings":{"downloads":0.8152106931979878,"dependent_repos_count":0.3362632068389858,"dependent_packages_count":0.4267236378778598,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":1.2684196736195665,"average":0.6615414090012223},"purl":"pkg:npm/expo-app-loading","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-app-loading","docker_dependents_count":1,"docker_downloads_count":64,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-app-loading","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-app-loading/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-loading/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-loading/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-loading/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-loading/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-loading/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-loading/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-01T21:01:49.215Z","updated_at":"2026-04-01T21:01:49.215Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T17:02:54.413Z","updated_at":"2026-02-25T17:02:54.413Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T11:47:19.890Z","updated_at":"2022-11-10T11:47:19.890Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T11:47:19.894Z","updated_at":"2022-11-10T11:47:19.894Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T11:47:19.911Z","updated_at":"2022-11-10T11:47:19.911Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T11:47:19.924Z","updated_at":"2022-11-10T11:47:19.924Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T11:47:19.927Z","updated_at":"2022-11-10T11:47:19.927Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T11:47:19.934Z","updated_at":"2022-11-10T11:47:19.934Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T11:47:19.971Z","updated_at":"2022-11-10T11:47:19.971Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T17:00:29.987Z","updated_at":"2026-08-02T17:00:29.987Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:30:36.190Z","updated_at":"2024-01-27T00:30:36.190Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:11.798Z","updated_at":"2024-06-26T18:19:11.798Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":4344570,"name":"expo-video","ecosystem":"npm","description":"A cross-platform, performant video component for React Native and Expo with Web support","homepage":"https://docs.expo.dev/versions/latest/sdk/video/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","player","react-native","video"],"namespace":null,"versions_count":239,"first_release_published_at":"2024-03-27T18:30:06.485Z","latest_release_published_at":"2026-08-26T19:58:17.979Z","latest_release_number":"57.0.3","last_synced_at":"2026-09-02T00:22:44.087Z","created_at":"2022-05-01T22:10:46.019Z","updated_at":"2026-09-02T00:22:44.088Z","registry_url":"https://www.npmjs.com/package/expo-video","install_command":"npm install expo-video","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-51":"1.1.9","sdk-53":"2.2.3","canary-sdk-55":"55.0.10-canary-20260429-a5e59cf","canary-sdk-56":"56.1.3-canary-20260701-9100865","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.21","latest":"57.0.3","next":"57.0.3"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-27T09:49:59.249Z","dependent_packages_count":0,"downloads":6340357,"downloads_period":"last-month","dependent_repos_count":4,"rankings":{"downloads":7.154320492411287,"dependent_repos_count":5.600631526553282,"dependent_packages_count":52.11751401104555,"stargazers_count":12.244970926615252,"forks_count":15.443942289853089,"docker_downloads_count":null,"average":18.512275849295694},"purl":"pkg:npm/expo-video","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-video","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-video","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-video/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T02:00:14.697Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":684,"past_year_pull_requests_count":1974,"past_year_avg_time_to_close_issue":1408695.6530612244,"past_year_avg_time_to_close_pull_request":726734.2550458716,"past_year_issues_closed_count":392,"past_year_pull_requests_closed_count":1090,"past_year_pull_request_authors_count":389,"past_year_issue_authors_count":554,"past_year_avg_comments_per_issue":2.6140350877192984,"past_year_avg_comments_per_pull_request":2.1930091185410334,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":849,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-01T21:02:58.741Z","updated_at":"2026-04-01T21:02:58.741Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T15:01:55.576Z","updated_at":"2026-02-25T15:01:55.576Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2024-03-22T18:25:47.435Z","updated_at":"2024-03-22T18:25:47.435Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2024-03-21T18:25:17.621Z","updated_at":"2024-03-21T18:25:17.621Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2024-03-22T18:25:47.577Z","updated_at":"2024-03-22T18:25:47.577Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2024-03-22T18:25:47.675Z","updated_at":"2024-03-22T18:25:47.675Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2024-03-22T18:25:47.722Z","updated_at":"2024-03-22T18:25:47.722Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2024-03-22T18:25:48.287Z","updated_at":"2024-03-22T18:25:48.287Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2024-03-22T18:25:49.726Z","updated_at":"2024-03-22T18:25:49.726Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-05T23:30:05.780Z","updated_at":"2026-08-05T23:30:05.780Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-03-22T18:25:46.865Z","updated_at":"2024-03-22T18:25:46.865Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:24:04.286Z","updated_at":"2024-06-26T18:24:04.286Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695841,"name":"expo-standard-web-crypto","ecosystem":"npm","description":"A partial implementation of the W3C Crypto API for Expo","homepage":"https://github.com/expo/expo/blob/main/packages/expo-standard-web-crypto","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["crypto","expo"],"namespace":null,"versions_count":211,"first_release_published_at":"2023-11-23T16:18:31.391Z","latest_release_published_at":"2026-08-26T19:56:28.293Z","latest_release_number":"57.0.2","last_synced_at":"2026-09-02T00:23:26.356Z","created_at":"2022-04-09T15:17:32.779Z","updated_at":"2026-09-02T00:23:26.357Z","registry_url":"https://www.npmjs.com/package/expo-standard-web-crypto","install_command":"npm install expo-standard-web-crypto","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"1.7.0","sdk-51":"1.8.1","canary-sdk-55":"55.0.6-canary-20260429-a5e59cf","canary-sdk-56":"56.0.4-canary-20260701-9100865","sdk-55":"55.0.12","canary":"58.0.0-canary-20260901-2164f24","latest":"57.0.2","next":"57.0.2"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-24T14:45:20.615Z","dependent_packages_count":8,"downloads":174890,"downloads_period":"last-month","dependent_repos_count":45,"rankings":{"downloads":1.26483249708623,"dependent_repos_count":1.9332780968162815,"dependent_packages_count":2.4792591758145988,"stargazers_count":0.5669562089981925,"forks_count":0.5222798020344991,"docker_downloads_count":null,"average":1.3533211561499603},"purl":"pkg:npm/expo-standard-web-crypto","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-standard-web-crypto","docker_dependents_count":1,"docker_downloads_count":144760,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-standard-web-crypto","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-standard-web-crypto/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-24T04:00:11.685Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":658,"past_year_pull_requests_count":1893,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":637801.2187802517,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1033,"past_year_pull_request_authors_count":365,"past_year_issue_authors_count":537,"past_year_avg_comments_per_issue":2.5182370820668694,"past_year_avg_comments_per_pull_request":2.0718436344426836,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":810,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-standard-web-crypto/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-standard-web-crypto/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-standard-web-crypto/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-standard-web-crypto/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-standard-web-crypto/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-standard-web-crypto/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T11:08:51.936Z","updated_at":"2026-04-02T11:08:51.936Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T02:31:20.826Z","updated_at":"2026-02-26T02:31:20.826Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T21:03:18.854Z","updated_at":"2022-11-08T21:03:18.854Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T21:03:18.935Z","updated_at":"2022-11-08T21:03:18.935Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T21:03:19.162Z","updated_at":"2022-11-08T21:03:19.162Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T21:03:19.280Z","updated_at":"2022-11-08T21:03:19.280Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T04:23:14.503Z","updated_at":"2025-09-20T04:23:14.503Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T21:03:19.393Z","updated_at":"2022-11-08T21:03:19.393Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T21:03:19.564Z","updated_at":"2022-11-08T21:03:19.564Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T23:00:34.706Z","updated_at":"2026-08-01T23:00:34.706Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T06:13:17.929Z","updated_at":"2024-01-27T06:13:17.929Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:47.477Z","updated_at":"2024-06-26T18:19:47.477Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14261495,"name":"expo-type-information","ecosystem":"npm","description":"\u003e [!WARNING] \u003e This package only works on macOS.","homepage":"https://github.com/expo/expo#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","expo-modules","react-native"],"namespace":null,"versions_count":38,"first_release_published_at":"2026-04-14T14:21:05.501Z","latest_release_published_at":"2026-07-29T19:29:02.924Z","latest_release_number":"0.1.6","last_synced_at":"2026-09-02T00:24:26.034Z","created_at":"2026-04-16T09:12:50.093Z","updated_at":"2026-09-02T07:17:04.728Z","registry_url":"https://www.npmjs.com/package/expo-type-information","install_command":"npm install expo-type-information","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"canary-sdk-56":"0.0.9-canary-20260701-9100865","latest":"0.1.6","next":"0.1.6","sdk-56":"0.0.13","canary":"0.1.7-canary-20260901-2164f24"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T07:17:04.728Z","dependent_packages_count":0,"downloads":20286,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":22.033499821233164,"dependent_packages_count":31.791732196433674,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":26.912616008833417},"purl":"pkg:npm/expo-type-information","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-type-information","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-type-information","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-type-information/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-type-information/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-type-information/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-type-information/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-type-information/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-type-information/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-type-information/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-05-14T00:05:46.243Z","updated_at":"2026-05-14T00:05:46.243Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-05-14T00:05:44.323Z","updated_at":"2026-05-14T00:05:44.323Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2026-05-14T00:05:39.295Z","updated_at":"2026-05-14T00:05:39.295Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2026-05-14T00:05:39.616Z","updated_at":"2026-05-14T00:05:39.616Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2026-05-14T00:05:40.935Z","updated_at":"2026-05-14T00:05:40.935Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2026-05-14T00:05:41.480Z","updated_at":"2026-05-14T00:05:41.480Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2026-05-14T00:05:46.878Z","updated_at":"2026-05-14T00:05:46.878Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2026-05-14T00:05:42.089Z","updated_at":"2026-05-14T00:05:42.089Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2026-05-14T00:05:42.913Z","updated_at":"2026-05-14T00:05:42.913Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-05T23:29:34.118Z","updated_at":"2026-08-05T23:29:34.118Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"jake7","login":"jake7","name":null,"email":"kontakt@jakubgrzywacz.pl","url":null,"packages_count":2025,"html_url":"https://www.npmjs.com/~jake7","role":null,"created_at":"2026-04-16T09:12:50.705Z","updated_at":"2026-04-16T09:12:50.705Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/jake7/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2026-05-14T00:05:43.696Z","updated_at":"2026-05-14T00:05:43.696Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2026-05-14T00:05:45.158Z","updated_at":"2026-05-14T00:05:45.158Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695846,"name":"expo-store-review","ecosystem":"npm","description":"Provides access to native APIs for in-app reviews.","homepage":"https://docs.expo.dev/versions/latest/sdk/storereview/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["app-store","expo","expo-store-review","google-play-store","react-native","reviews"],"namespace":null,"versions_count":242,"first_release_published_at":"2023-11-23T16:18:39.219Z","latest_release_published_at":"2026-08-14T14:22:47.863Z","latest_release_number":"57.0.2","last_synced_at":"2026-09-02T00:24:27.756Z","created_at":"2022-04-09T15:17:32.947Z","updated_at":"2026-09-02T00:24:27.756Z","registry_url":"https://www.npmjs.com/package/expo-store-review","install_command":"npm install expo-store-review","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"6.8.3","sdk-51":"7.0.2","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.4-canary-20260701-9100865","canary":"58.0.0-canary-20260901-2164f24","latest":"57.0.2","next":"57.0.2","sdk-56":"56.0.4","sdk-55":"55.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-23T00:12:10.365Z","dependent_packages_count":6,"downloads":4126330,"downloads_period":"last-month","dependent_repos_count":112,"rankings":{"downloads":0.6684369152857607,"dependent_repos_count":1.3653594815198409,"dependent_packages_count":3.1513028916156935,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":1.2615461061788458},"purl":"pkg:npm/expo-store-review","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-store-review","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-store-review","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-store-review/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-22T18:06:09.698Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":660,"past_year_pull_requests_count":1900,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":638702.7996146436,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1038,"past_year_pull_request_authors_count":367,"past_year_issue_authors_count":539,"past_year_avg_comments_per_issue":2.5106060606060607,"past_year_avg_comments_per_pull_request":2.071578947368421,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":813,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-store-review/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-store-review/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-store-review/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-store-review/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-store-review/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-store-review/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T15:30:32.096Z","updated_at":"2026-04-02T15:30:32.096Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-08T21:03:19.322Z","updated_at":"2022-11-08T21:03:19.322Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T21:03:19.115Z","updated_at":"2022-11-08T21:03:19.115Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T21:03:19.171Z","updated_at":"2022-11-08T21:03:19.171Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T21:03:19.288Z","updated_at":"2022-11-08T21:03:19.288Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T21:03:19.395Z","updated_at":"2022-11-08T21:03:19.395Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-08T21:03:19.428Z","updated_at":"2022-11-08T21:03:19.428Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T21:03:19.519Z","updated_at":"2022-11-08T21:03:19.519Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T21:03:19.766Z","updated_at":"2022-11-08T21:03:19.766Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T14:30:19.667Z","updated_at":"2026-08-01T14:30:19.667Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-10-29T22:26:10.962Z","updated_at":"2024-10-29T22:26:10.962Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-10-29T22:26:10.265Z","updated_at":"2024-10-29T22:26:10.265Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":6499215,"name":"expo-server","ecosystem":"npm","description":"Server API for Expo Router projects","homepage":"https://github.com/expo/expo/tree/main/packages/expo-server#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo"],"namespace":null,"versions_count":107,"first_release_published_at":"2023-03-09T19:46:15.565Z","latest_release_published_at":"2026-08-14T14:22:51.084Z","latest_release_number":"57.0.3","last_synced_at":"2026-09-02T00:32:39.322Z","created_at":"2023-03-09T20:33:09.357Z","updated_at":"2026-09-02T00:32:39.322Z","registry_url":"https://www.npmjs.com/package/expo-server","install_command":"npm install expo-server","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"canary-sdk-55":"55.0.6-canary-20260429-a5e59cf","sdk-54":"1.0.7","canary-sdk-56":"56.0.5-canary-20260701-9100865","canary":"58.0.0-canary-20260901-2164f24","latest":"57.0.3","next":"57.0.3","sdk-56":"56.0.6","sdk-55":"55.0.12"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-31T03:37:06.642Z","dependent_packages_count":0,"downloads":29222192,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":25.30552159382132,"dependent_packages_count":32.889739249478886,"stargazers_count":null,"forks_count":null,"average":29.097630421650102},"purl":"pkg:npm/expo-server","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-server","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-server","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-server/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-31T01:44:55.069Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2344,"past_year_pull_requests_count":8017,"past_year_avg_time_to_close_issue":1620733.06194275,"past_year_avg_time_to_close_pull_request":760149.2128760038,"past_year_issues_closed_count":2131,"past_year_pull_requests_closed_count":7347,"past_year_pull_request_authors_count":1009,"past_year_issue_authors_count":1663,"past_year_avg_comments_per_issue":2.897184300341297,"past_year_avg_comments_per_pull_request":2.1515529499812898,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6136,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-server/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-server/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-server/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-server/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-server/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-server/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2025-09-29T19:56:20.381Z","updated_at":"2025-09-29T19:56:20.381Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-03-07T07:23:50.033Z","updated_at":"2026-03-07T07:23:50.033Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2025-09-29T19:56:19.069Z","updated_at":"2025-09-29T19:56:19.069Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2025-09-29T19:56:19.185Z","updated_at":"2025-09-29T19:56:19.185Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"evanbacon","login":"evanbacon","name":null,"email":"baconbrix@gmail.com","url":null,"packages_count":294,"html_url":"https://www.npmjs.com/~evanbacon","role":null,"created_at":"2023-03-09T21:20:26.610Z","updated_at":"2023-03-09T21:20:26.610Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/evanbacon/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2025-09-29T19:56:19.402Z","updated_at":"2025-09-29T19:56:19.402Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2025-09-29T19:56:19.492Z","updated_at":"2025-09-29T19:56:19.492Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-29T19:56:20.258Z","updated_at":"2025-09-29T19:56:20.258Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2025-09-29T19:56:19.552Z","updated_at":"2025-09-29T19:56:19.552Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2025-09-29T19:56:19.712Z","updated_at":"2025-09-29T19:56:19.712Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T13:47:32.233Z","updated_at":"2026-08-06T13:47:32.233Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2025-09-29T19:56:20.021Z","updated_at":"2025-09-29T19:56:20.021Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2025-09-29T19:56:20.204Z","updated_at":"2025-09-29T19:56:20.204Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":2178386,"name":"pod-install","ecosystem":"npm","description":"A fast, zero-dependency package for cutting down on common issues developers have when running pod install.","homepage":"https://github.com/expo/expo/tree/main/packages/pod-install","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["cocoapods","ios","npx","pod-install"],"namespace":null,"versions_count":248,"first_release_published_at":"2020-03-27T04:44:38.768Z","latest_release_published_at":"2026-06-25T19:28:51.959Z","latest_release_number":"1.1.0","last_synced_at":"2026-09-02T00:34:01.061Z","created_at":"2022-04-09T22:05:36.838Z","updated_at":"2026-09-02T00:34:01.061Z","registry_url":"https://www.npmjs.com/package/pod-install","install_command":"npm install pod-install","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"alpha":"0.1.19-alpha.0","sdk-50":"0.2.0","sdk-51":"0.2.2","canary-sdk-55":"1.0.16-canary-20260429-a5e59cf","sdk-55":"1.0.20","latest":"1.1.0","next":"1.1.0","canary-sdk-56":"1.2.0-canary-20260701-9100865","canary":"1.1.1-canary-20260901-2164f24"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-27T23:00:01.766Z","dependent_packages_count":5730,"downloads":648143,"downloads_period":"last-month","dependent_repos_count":2528,"rankings":{"downloads":0.4616950627863316,"dependent_repos_count":0.45189255880711865,"dependent_packages_count":0.020179934878027817,"stargazers_count":1.8231657921635824,"forks_count":1.7272751571915812,"docker_downloads_count":0.9139325777452113,"average":0.8996901805953089},"purl":"pkg:npm/pod-install","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/pod-install","docker_dependents_count":9,"docker_downloads_count":4664,"usage_url":"https://repos.ecosyste.ms/usage/npm/pod-install","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/pod-install/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T16:00:21.215Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":680,"past_year_pull_requests_count":1966,"past_year_avg_time_to_close_issue":1412298.4398976981,"past_year_avg_time_to_close_pull_request":727550.3805147059,"past_year_issues_closed_count":391,"past_year_pull_requests_closed_count":1088,"past_year_pull_request_authors_count":387,"past_year_issue_authors_count":551,"past_year_avg_comments_per_issue":2.6220588235294118,"past_year_avg_comments_per_pull_request":2.198880976602238,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":847,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pod-install/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pod-install/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pod-install/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pod-install/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pod-install/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/pod-install/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T20:31:15.623Z","updated_at":"2026-04-02T20:31:15.623Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T09:01:39.828Z","updated_at":"2026-02-26T09:01:39.828Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T12:11:10.807Z","updated_at":"2022-11-10T12:11:10.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T12:11:10.823Z","updated_at":"2022-11-10T12:11:10.823Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"evanbacon","login":"evanbacon","name":null,"email":"baconbrix@gmail.com","url":null,"packages_count":294,"html_url":"https://www.npmjs.com/~evanbacon","role":null,"created_at":"2022-11-10T12:11:10.836Z","updated_at":"2022-11-10T12:11:10.836Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/evanbacon/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T12:11:10.853Z","updated_at":"2022-11-10T12:11:10.853Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T12:11:10.886Z","updated_at":"2022-11-10T12:11:10.886Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T12:11:10.894Z","updated_at":"2022-11-10T12:11:10.894Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T12:11:10.928Z","updated_at":"2022-11-10T12:11:10.928Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T12:11:10.966Z","updated_at":"2022-11-10T12:11:10.966Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T13:30:18.023Z","updated_at":"2026-08-02T13:30:18.023Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:32:23.306Z","updated_at":"2024-01-27T00:32:23.306Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:21:21.041Z","updated_at":"2024-06-26T18:21:21.041Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695533,"name":"expo-brightness","ecosystem":"npm","description":"Provides an API to get and set screen brightness.","homepage":"https://docs.expo.dev/versions/latest/sdk/brightness/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["brightness","expo","expo-brightness","react-native"],"namespace":null,"versions_count":235,"first_release_published_at":"2023-11-23T16:13:33.778Z","latest_release_published_at":"2026-07-15T10:06:10.380Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T00:34:55.077Z","created_at":"2022-04-09T15:17:16.581Z","updated_at":"2026-09-02T00:34:55.077Z","registry_url":"https://www.npmjs.com/package/expo-brightness","install_command":"npm install expo-brightness","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"11.8.0","sdk-51":"12.0.1","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.6-canary-20260701-9100865","next":"57.0.1","latest":"57.0.1","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.17"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-25T22:29:03.049Z","dependent_packages_count":23,"downloads":585093,"downloads_period":"last-month","dependent_repos_count":4757,"rankings":{"downloads":1.0918680604573516,"dependent_repos_count":0.331221359506123,"dependent_packages_count":1.0547403372424038,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":0.7200921999357623},"purl":"pkg:npm/expo-brightness","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-brightness","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-brightness","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-brightness/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-25T16:14:27.710Z","issues_count":7150,"pull_requests_count":16680,"avg_time_to_close_issue":4993141.988060218,"avg_time_to_close_pull_request":1690468.2896444902,"issues_closed_count":5777,"pull_requests_closed_count":13558,"pull_request_authors_count":1473,"issue_authors_count":4926,"avg_comments_per_issue":4.502797202797203,"avg_comments_per_pull_request":1.6036570743405276,"merged_pull_requests_count":11821,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":672,"past_year_pull_requests_count":1938,"past_year_avg_time_to_close_issue":1326238.955613577,"past_year_avg_time_to_close_pull_request":712212.9384328359,"past_year_issues_closed_count":383,"past_year_pull_requests_closed_count":1072,"past_year_pull_request_authors_count":378,"past_year_issue_authors_count":547,"past_year_avg_comments_per_issue":2.5580357142857144,"past_year_avg_comments_per_pull_request":2.1393188854489162,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1665,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1097,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":305,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":176,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":115,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":95,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-brightness/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-brightness/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-brightness/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-brightness/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-brightness/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-brightness/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T08:27:22.180Z","updated_at":"2026-04-03T08:27:22.180Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T21:01:18.678Z","updated_at":"2026-02-25T21:01:18.678Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-11T01:29:20.741Z","updated_at":"2022-11-11T01:29:20.741Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-11T01:29:20.799Z","updated_at":"2022-11-11T01:29:20.799Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-11T01:29:20.865Z","updated_at":"2022-11-11T01:29:20.865Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-11T01:29:20.879Z","updated_at":"2022-11-11T01:29:20.879Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-11T01:29:20.887Z","updated_at":"2022-11-11T01:29:20.887Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-11T01:29:20.901Z","updated_at":"2022-11-11T01:29:20.901Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-11T01:29:20.931Z","updated_at":"2022-11-11T01:29:20.931Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T10:03:02.033Z","updated_at":"2026-08-01T10:03:02.033Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-20T10:37:14.486Z","updated_at":"2024-08-20T10:37:14.486Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-20T10:37:14.446Z","updated_at":"2024-08-20T10:37:14.446Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695753,"name":"expo-notifications","ecosystem":"npm","description":"Provides an API to fetch push notification tokens and to present, schedule, receive, and respond to notifications.","homepage":"https://docs.expo.dev/versions/latest/sdk/notifications/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","expo-notifications","notifications","push-nofifications","react-native"],"namespace":null,"versions_count":378,"first_release_published_at":"2023-11-23T16:17:16.916Z","latest_release_published_at":"2026-09-01T16:18:23.862Z","latest_release_number":"57.0.16","last_synced_at":"2026-09-02T00:37:34.963Z","created_at":"2022-04-09T15:17:28.686Z","updated_at":"2026-09-02T00:37:34.963Z","registry_url":"https://www.npmjs.com/package/expo-notifications","install_command":"npm install expo-notifications","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"0.27.6","sdk-51":"0.28.3","sdk-53":"0.31.5","sdk-54":"0.32.17","canary-sdk-55":"55.0.11-canary-20260429-a5e59cf","canary-sdk-56":"56.0.15-canary-20260701-9100865","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.27","sdk-56":"56.0.25","latest":"57.0.16","next":"57.0.16"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2024-10-29T09:37:15.000Z","size":3134836,"stargazers_count":33866,"open_issues_count":684,"forks_count":5424,"subscribers_count":301,"default_branch":"main","last_synced_at":"2024-10-29T09:46:34.440Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2024-10-29T09:23:34.000Z","dependencies_parsed_at":"2024-04-23T12:51:47.000Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":20842,"total_committers":1306,"mean_commits":15.95865237366003,"dds":0.8886863064964975,"last_synced_commit":"18e2e95c53e01de224ecc534467a447c6bd3afd7"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":222061317,"owners_count":16924680,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":405,"last_synced_at":"2024-04-12T10:03:26.593Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/expo","funding_links":[],"total_stars":69025,"followers":1408,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2024-04-12T10:05:06.678Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[]},"repo_metadata_updated_at":"2024-10-29T16:25:43.275Z","dependent_packages_count":75,"downloads":16879660,"downloads_period":"last-month","dependent_repos_count":2053,"rankings":{"downloads":0.40363214333639164,"dependent_repos_count":0.4872466011582058,"dependent_packages_count":0.5100499529903242,"stargazers_count":0.6035957132808298,"forks_count":0.5493163501280407,"docker_downloads_count":null,"average":0.5107681521787584},"purl":"pkg:npm/expo-notifications","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-notifications","docker_dependents_count":2,"docker_downloads_count":4833,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-notifications","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-notifications/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-10-29T13:50:42.912Z","issues_count":8982,"pull_requests_count":8714,"avg_time_to_close_issue":5703193.884545729,"avg_time_to_close_pull_request":1791598.0808654288,"issues_closed_count":6606,"pull_requests_closed_count":6517,"pull_request_authors_count":634,"issue_authors_count":2880,"avg_comments_per_issue":6.536072144288577,"avg_comments_per_pull_request":1.190842322699105,"merged_pull_requests_count":5820,"bot_issues_count":0,"bot_pull_requests_count":130,"past_year_issues_count":4713,"past_year_pull_requests_count":6390,"past_year_avg_time_to_close_issue":1192008.8331729227,"past_year_avg_time_to_close_pull_request":415860.2536217099,"past_year_issues_closed_count":3110,"past_year_pull_requests_closed_count":4901,"past_year_pull_request_authors_count":471,"past_year_issue_authors_count":1688,"past_year_avg_comments_per_issue":3.24124761298536,"past_year_avg_comments_per_pull_request":1.189827856025039,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":86,"past_year_merged_pull_requests_count":4501,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":853,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"wschurman","count":538,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"alanjhughes","count":520,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":507,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"Simek","count":420,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"tsapeta","count":405,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":311,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":123,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":69,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"ide","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"szdziedzic","count":33,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"kitten","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"betomoedano","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"kbrandwijk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"tchayen","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"}],"active_maintainers":[{"login":"amandeepmittal","count":673,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"byCedric","count":425,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"alanjhughes","count":415,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":379,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"wschurman","count":360,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":313,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"gabrieldonadel","count":249,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"behenate","count":147,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":91,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"quinlanj","count":56,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"jonsamp","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"szdziedzic","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"kitten","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"ide","count":19,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"betomoedano","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"tchayen","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-notifications/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-notifications/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-notifications/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-notifications/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-notifications/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-notifications/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-07T10:13:57.110Z","updated_at":"2026-04-07T10:13:57.110Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-03-28T11:07:52.769Z","updated_at":"2026-03-28T11:07:52.769Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T21:03:18.515Z","updated_at":"2022-11-08T21:03:18.515Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T21:03:19.368Z","updated_at":"2022-11-08T21:03:19.368Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T21:03:19.500Z","updated_at":"2022-11-08T21:03:19.500Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T21:03:19.624Z","updated_at":"2022-11-08T21:03:19.624Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-08T21:03:19.674Z","updated_at":"2022-11-08T21:03:19.674Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T21:03:19.702Z","updated_at":"2022-11-08T21:03:19.702Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T21:03:19.908Z","updated_at":"2022-11-08T21:03:19.908Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-12T14:09:00.914Z","updated_at":"2026-08-12T14:09:00.914Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-02-05T06:49:50.017Z","updated_at":"2024-02-05T06:49:50.017Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:16:35.109Z","updated_at":"2024-06-26T18:16:35.109Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695733,"name":"expo-modules-core","ecosystem":"npm","description":"The core of Expo Modules architecture","homepage":"https://github.com/expo/expo/tree/main/packages/expo-modules-core","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","modules","expo-modules","unimodules","react-native"],"namespace":null,"versions_count":432,"first_release_published_at":"2023-11-23T16:16:53.670Z","latest_release_published_at":"2026-09-01T16:18:36.620Z","latest_release_number":"57.0.15","last_synced_at":"2026-09-01T16:34:20.075Z","created_at":"2022-04-09T15:17:27.641Z","updated_at":"2026-09-02T00:40:14.482Z","registry_url":"https://www.npmjs.com/package/expo-modules-core","install_command":"npm install expo-modules-core","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"1.11.11","sdk-51":"1.12.11","sdk-54":"3.0.30","canary-sdk-55":"55.0.13-canary-20260429-a5e59cf","canary-sdk-56":"56.0.14-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","next":"57.0.15","latest":"57.0.14","sdk-56":"56.0.25","sdk-55":"55.0.26"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T00:40:14.482Z","dependent_packages_count":447,"downloads":34088670,"downloads_period":"last-month","dependent_repos_count":55135,"rankings":{"downloads":0.2096132046898778,"dependent_repos_count":0.1373918499485744,"dependent_packages_count":0.19628222735225379,"stargazers_count":0.6031767690449568,"forks_count":0.5481971922735139,"docker_downloads_count":0.8566366143999105,"average":0.4252163096181812},"purl":"pkg:npm/expo-modules-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-modules-core","docker_dependents_count":49,"docker_downloads_count":177822,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-modules-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-modules-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-modules-core/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T16:01:11.024Z","updated_at":"2026-04-02T16:01:11.024Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-21T12:28:27.254Z","updated_at":"2022-11-21T12:28:27.254Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-21T12:28:27.218Z","updated_at":"2022-11-21T12:28:27.218Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-21T12:28:27.225Z","updated_at":"2022-11-21T12:28:27.225Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-21T12:28:27.246Z","updated_at":"2022-11-21T12:28:27.246Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-21T12:28:27.270Z","updated_at":"2022-11-21T12:28:27.270Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-21T02:35:54.082Z","updated_at":"2025-09-21T02:35:54.082Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-21T12:28:27.285Z","updated_at":"2022-11-21T12:28:27.285Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-21T12:28:27.301Z","updated_at":"2022-11-21T12:28:27.301Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T20:30:22.845Z","updated_at":"2026-08-01T20:30:22.845Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-02-05T06:50:00.752Z","updated_at":"2024-02-05T06:50:00.752Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:39.425Z","updated_at":"2024-06-26T18:19:39.425Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695835,"name":"expo-splash-screen","ecosystem":"npm","description":"Provides a module to allow keeping the native Splash Screen visible until you choose to hide it.","homepage":"https://docs.expo.dev/versions/latest/sdk/splash-screen/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","expo-splash-screen","launch","launch-screen","react-native","splash","splash-screen"],"namespace":null,"versions_count":344,"first_release_published_at":"2023-11-23T16:18:17.224Z","latest_release_published_at":"2026-08-24T07:57:44.489Z","latest_release_number":"57.0.8","last_synced_at":"2026-09-02T00:42:16.648Z","created_at":"2022-04-09T15:17:32.453Z","updated_at":"2026-09-02T00:42:16.648Z","registry_url":"https://www.npmjs.com/package/expo-splash-screen","install_command":"npm install expo-splash-screen","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"0.26.4","sdk-51":"0.27.4","canary-sdk-55":"55.0.10-canary-20260429-a5e59cf","canary-sdk-56":"56.0.11-canary-20260701-9100865","canary":"58.0.0-canary-20260901-2164f24","next":"57.0.8","latest":"57.0.8","sdk-55":"55.0.25","sdk-56":"56.0.15"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T20:17:06.483Z","dependent_packages_count":273,"downloads":21530311,"downloads_period":"last-month","dependent_repos_count":34079,"rankings":{"downloads":0.28596484977075687,"dependent_repos_count":0.16979162955138688,"dependent_packages_count":0.22199510484124074,"stargazers_count":0.6035957132808298,"forks_count":0.5493163501280407,"docker_downloads_count":0.8477800369409576,"average":0.4464072807522021},"purl":"pkg:npm/expo-splash-screen","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-splash-screen","docker_dependents_count":14,"docker_downloads_count":7378,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-splash-screen","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-splash-screen/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-splash-screen/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-splash-screen/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-splash-screen/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-splash-screen/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-splash-screen/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-splash-screen/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T03:31:19.358Z","updated_at":"2026-04-03T03:31:19.358Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T15:02:02.075Z","updated_at":"2026-02-25T15:02:02.075Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T11:29:51.735Z","updated_at":"2022-11-10T11:29:51.735Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T11:29:51.743Z","updated_at":"2022-11-10T11:29:51.743Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T11:29:51.760Z","updated_at":"2022-11-10T11:29:51.760Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T11:29:51.786Z","updated_at":"2022-11-10T11:29:51.786Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T19:07:57.926Z","updated_at":"2025-09-20T19:07:57.926Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T11:29:51.806Z","updated_at":"2022-11-10T11:29:51.806Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T11:29:51.834Z","updated_at":"2022-11-10T11:29:51.834Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T16:30:21.476Z","updated_at":"2026-08-02T16:30:21.476Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:31:52.653Z","updated_at":"2024-01-27T00:31:52.653Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:44.807Z","updated_at":"2024-06-26T18:19:44.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695549,"name":"expo-cellular","ecosystem":"npm","description":"Provides information about the user’s cellular service provider","homepage":"https://docs.expo.dev/versions/latest/sdk/cellular/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","expo-cellular","react-native"],"namespace":null,"versions_count":226,"first_release_published_at":"2023-11-23T16:13:54.950Z","latest_release_published_at":"2026-07-15T10:06:03.413Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T00:43:45.709Z","created_at":"2022-04-09T15:17:17.286Z","updated_at":"2026-09-02T00:43:45.709Z","registry_url":"https://www.npmjs.com/package/expo-cellular","install_command":"npm install expo-cellular","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"5.7.1","sdk-51":"6.0.2","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.6-canary-20260701-9100865","next":"57.0.1","latest":"57.0.1","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.17"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-23T11:06:33.920Z","dependent_packages_count":9,"downloads":174275,"downloads_period":"last-month","dependent_repos_count":57,"rankings":{"downloads":1.725880362564844,"dependent_repos_count":1.776144331168067,"dependent_packages_count":2.250904144690052,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":1.3751120161791792},"purl":"pkg:npm/expo-cellular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-cellular","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-cellular","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-cellular/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-22T18:06:09.698Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":660,"past_year_pull_requests_count":1900,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":638702.7996146436,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1038,"past_year_pull_request_authors_count":367,"past_year_issue_authors_count":539,"past_year_avg_comments_per_issue":2.5106060606060607,"past_year_avg_comments_per_pull_request":2.071578947368421,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":813,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-cellular/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-cellular/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-cellular/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-cellular/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-cellular/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-cellular/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T12:30:54.907Z","updated_at":"2026-04-02T12:30:54.907Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-14T10:48:09.467Z","updated_at":"2022-11-14T10:48:09.467Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-14T10:48:09.344Z","updated_at":"2022-11-14T10:48:09.344Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-14T10:48:09.360Z","updated_at":"2022-11-14T10:48:09.360Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-14T10:48:09.453Z","updated_at":"2022-11-14T10:48:09.453Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-14T10:48:12.098Z","updated_at":"2022-11-14T10:48:12.098Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-14T10:48:12.972Z","updated_at":"2022-11-14T10:48:12.972Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-14T10:48:14.154Z","updated_at":"2022-11-14T10:48:14.154Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-14T10:48:14.840Z","updated_at":"2022-11-14T10:48:14.840Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T13:00:46.377Z","updated_at":"2026-08-01T13:00:46.377Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T06:13:17.476Z","updated_at":"2024-01-27T06:13:17.476Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:17.144Z","updated_at":"2024-06-26T18:19:17.144Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695560,"name":"expo-contacts","ecosystem":"npm","description":"Provides access to the phone's system contacts.","homepage":"https://docs.expo.dev/versions/latest/sdk/contacts/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["contacts","expo","react-native"],"namespace":null,"versions_count":286,"first_release_published_at":"2023-11-23T16:14:11.909Z","latest_release_published_at":"2026-08-14T14:23:08.213Z","latest_release_number":"57.0.4","last_synced_at":"2026-09-02T00:44:19.080Z","created_at":"2022-04-09T15:17:18.118Z","updated_at":"2026-09-02T00:44:19.080Z","registry_url":"https://www.npmjs.com/package/expo-contacts","install_command":"npm install expo-contacts","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"12.8.2","sdk-51":"13.0.4","sdk-53":"14.2.6","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.8-canary-20260701-9100865","canary":"58.0.0-canary-20260901-2164f24","next":"57.0.4","latest":"57.0.4","sdk-56":"56.0.13","sdk-55":"55.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-23T20:40:25.515Z","dependent_packages_count":18,"downloads":1897014,"downloads_period":"last-month","dependent_repos_count":9804,"rankings":{"downloads":0.9268283992519858,"dependent_repos_count":0.26619557559046336,"dependent_packages_count":1.2594154346298285,"stargazers_count":0.6035957132808298,"forks_count":0.5493163501280407,"docker_downloads_count":1.5550755318705545,"average":0.8600711674586171},"purl":"pkg:npm/expo-contacts","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-contacts","docker_dependents_count":1,"docker_downloads_count":8,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-contacts","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-contacts/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-23T11:00:10.005Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":658,"past_year_pull_requests_count":1898,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":639905.499034749,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1036,"past_year_pull_request_authors_count":366,"past_year_issue_authors_count":537,"past_year_avg_comments_per_issue":2.5182370820668694,"past_year_avg_comments_per_pull_request":2.072708113804004,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":812,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-contacts/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-contacts/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-contacts/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-contacts/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-contacts/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-contacts/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T12:01:53.728Z","updated_at":"2026-04-02T12:01:53.728Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-20T01:35:55.701Z","updated_at":"2022-11-20T01:35:55.701Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-20T01:35:55.725Z","updated_at":"2022-11-20T01:35:55.725Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-20T01:35:55.858Z","updated_at":"2022-11-20T01:35:55.858Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-20T01:35:55.952Z","updated_at":"2022-11-20T01:35:55.952Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-20T01:35:55.963Z","updated_at":"2022-11-20T01:35:55.963Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T02:10:21.110Z","updated_at":"2025-09-20T02:10:21.110Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-20T01:35:56.039Z","updated_at":"2022-11-20T01:35:56.039Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-20T01:35:56.136Z","updated_at":"2022-11-20T01:35:56.136Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T01:00:24.916Z","updated_at":"2026-08-02T01:00:24.916Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-10-31T06:45:26.106Z","updated_at":"2024-10-31T06:45:26.106Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-10-31T06:45:26.072Z","updated_at":"2024-10-31T06:45:26.072Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1230590,"name":"expo-clipboard","ecosystem":"npm","description":"Provides an interface for getting and setting Clipboard content on Android, iOS, macOS and Web.","homepage":"https://docs.expo.dev/versions/latest/sdk/clipboard","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","expo-clipboard","react-native"],"namespace":null,"versions_count":224,"first_release_published_at":"2023-11-23T16:14:02.775Z","latest_release_published_at":"2026-07-15T10:05:59.208Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T00:45:40.058Z","created_at":"2022-04-08T14:19:55.083Z","updated_at":"2026-09-02T00:45:40.058Z","registry_url":"https://www.npmjs.com/package/expo-clipboard","install_command":"npm install expo-clipboard","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"5.0.1","sdk-51":"6.0.3","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.4-canary-20260701-9100865","latest":"57.0.1","next":"57.0.1","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.17"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-31T03:37:06.439Z","dependent_packages_count":36,"downloads":11360852,"downloads_period":"last-month","dependent_repos_count":593,"rankings":{"downloads":0.4823932775272776,"dependent_repos_count":0.7470078011872797,"dependent_packages_count":1.0423768664481408,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":0.9142836779643093,"average":0.7239656567206061},"purl":"pkg:npm/expo-clipboard","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-clipboard","docker_dependents_count":5,"docker_downloads_count":1439,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-clipboard","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-clipboard/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-31T01:44:55.069Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2344,"past_year_pull_requests_count":8017,"past_year_avg_time_to_close_issue":1620733.06194275,"past_year_avg_time_to_close_pull_request":760149.2128760038,"past_year_issues_closed_count":2131,"past_year_pull_requests_closed_count":7347,"past_year_pull_request_authors_count":1009,"past_year_issue_authors_count":1663,"past_year_avg_comments_per_issue":2.897184300341297,"past_year_avg_comments_per_pull_request":2.1515529499812898,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6136,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-clipboard/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-clipboard/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-clipboard/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-clipboard/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-clipboard/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-clipboard/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T23:31:15.334Z","updated_at":"2026-04-02T23:31:15.334Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T21:32:23.661Z","updated_at":"2026-02-25T21:32:23.661Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-16T17:56:06.642Z","updated_at":"2022-11-16T17:56:06.642Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-16T17:56:06.650Z","updated_at":"2022-11-16T17:56:06.650Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-16T17:56:06.667Z","updated_at":"2022-11-16T17:56:06.667Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-16T17:56:06.707Z","updated_at":"2022-11-16T17:56:06.707Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-16T17:56:06.718Z","updated_at":"2022-11-16T17:56:06.718Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-16T17:56:06.762Z","updated_at":"2022-11-16T17:56:06.762Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-16T17:56:06.808Z","updated_at":"2022-11-16T17:56:06.808Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T05:01:35.834Z","updated_at":"2026-08-02T05:01:35.834Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2026-02-11T00:38:06.521Z","updated_at":"2026-02-11T00:38:06.521Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2026-02-11T00:38:06.579Z","updated_at":"2026-02-11T00:38:06.579Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695812,"name":"expo-sharing","ecosystem":"npm","description":"Provides a way to share files directly with other compatible applications.","homepage":"https://docs.expo.dev/versions/latest/sdk/sharing/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["android","expo","expo-sharing","ios","react-native","web"],"namespace":null,"versions_count":295,"first_release_published_at":"2023-11-23T16:18:03.265Z","latest_release_published_at":"2026-09-01T16:20:25.670Z","latest_release_number":"57.0.17","last_synced_at":"2026-09-02T00:49:17.223Z","created_at":"2022-04-09T15:17:31.449Z","updated_at":"2026-09-02T00:49:17.223Z","registry_url":"https://www.npmjs.com/package/expo-sharing","install_command":"npm install expo-sharing","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"11.10.0","sdk-51":"12.0.1","canary-sdk-55":"55.0.11-canary-20260429-a5e59cf","canary-sdk-56":"56.0.15-canary-20260701-9100865","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.24","sdk-56":"56.0.26","latest":"57.0.17","next":"57.0.17"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-01T03:38:57.825Z","dependent_packages_count":44,"downloads":7897079,"downloads_period":"last-month","dependent_repos_count":5088,"rankings":{"downloads":0.5272197079337338,"dependent_repos_count":0.34248543452749713,"dependent_packages_count":0.810495802799858,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":null,"average":0.5675866524915436},"purl":"pkg:npm/expo-sharing","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-sharing","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-sharing","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-sharing/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-31T22:00:20.455Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2342,"past_year_pull_requests_count":8011,"past_year_avg_time_to_close_issue":1614668.38046031,"past_year_avg_time_to_close_pull_request":760607.3345137564,"past_year_issues_closed_count":2129,"past_year_pull_requests_closed_count":7342,"past_year_pull_request_authors_count":1009,"past_year_issue_authors_count":1662,"past_year_avg_comments_per_issue":2.889410760034159,"past_year_avg_comments_per_pull_request":2.15241542878542,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6133,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":597,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sharing/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sharing/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sharing/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sharing/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sharing/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sharing/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T17:00:45.136Z","updated_at":"2026-04-03T17:00:45.136Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-20T02:03:34.983Z","updated_at":"2022-11-20T02:03:34.983Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-20T02:03:35.098Z","updated_at":"2022-11-20T02:03:35.098Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-20T02:03:35.279Z","updated_at":"2022-11-20T02:03:35.279Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-20T02:03:35.398Z","updated_at":"2022-11-20T02:03:35.398Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-20T02:03:35.448Z","updated_at":"2022-11-20T02:03:35.448Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T12:24:25.991Z","updated_at":"2025-09-20T12:24:25.991Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-20T02:03:35.493Z","updated_at":"2022-11-20T02:03:35.493Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-20T02:03:35.615Z","updated_at":"2022-11-20T02:03:35.615Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T19:00:31.008Z","updated_at":"2026-08-01T19:00:31.008Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T06:12:36.744Z","updated_at":"2024-01-27T06:12:36.744Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:20:08.113Z","updated_at":"2024-06-26T18:20:08.113Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695525,"name":"expo-blur","ecosystem":"npm","description":"A component that renders a native blur view on iOS and falls back to a semi-transparent view on Android. A common usage of this is for navigation bars, tab bars, and modals.","homepage":"https://docs.expo.dev/versions/latest/sdk/blur-view/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-blur"],"namespace":null,"versions_count":241,"first_release_published_at":"2023-11-23T16:13:28.764Z","latest_release_published_at":"2026-07-15T10:06:13.341Z","latest_release_number":"57.0.2","last_synced_at":"2026-09-01T20:50:31.183Z","created_at":"2022-04-09T15:17:15.950Z","updated_at":"2026-09-01T20:50:31.183Z","registry_url":"https://www.npmjs.com/package/expo-blur","install_command":"npm install expo-blur","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"12.9.2","sdk-51":"13.0.3","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.4-canary-20260701-9100865","latest":"57.0.2","next":"57.0.2","sdk-56":"56.0.4","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-28T10:33:33.393Z","dependent_packages_count":81,"downloads":10453027,"downloads_period":"last-month","dependent_repos_count":5397,"rankings":{"downloads":0.5456959429935129,"dependent_repos_count":0.31463928383359663,"dependent_packages_count":0.4229675824799396,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":0.4811868103559965},"purl":"pkg:npm/expo-blur","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-blur","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-blur","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-blur/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T16:00:21.215Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":680,"past_year_pull_requests_count":1966,"past_year_avg_time_to_close_issue":1412298.4398976981,"past_year_avg_time_to_close_pull_request":727550.3805147059,"past_year_issues_closed_count":391,"past_year_pull_requests_closed_count":1088,"past_year_pull_request_authors_count":387,"past_year_issue_authors_count":551,"past_year_avg_comments_per_issue":2.6220588235294118,"past_year_avg_comments_per_pull_request":2.198880976602238,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":847,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-blur/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-blur/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-blur/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-blur/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-blur/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-blur/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T16:00:13.279Z","updated_at":"2026-04-02T16:00:13.279Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-10T11:55:52.968Z","updated_at":"2022-11-10T11:55:52.968Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T11:55:53.001Z","updated_at":"2022-11-10T11:55:53.001Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T11:55:53.044Z","updated_at":"2022-11-10T11:55:53.044Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T11:55:53.068Z","updated_at":"2022-11-10T11:55:53.068Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T11:55:53.085Z","updated_at":"2022-11-10T11:55:53.085Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T11:55:53.099Z","updated_at":"2022-11-10T11:55:53.099Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T11:55:53.109Z","updated_at":"2022-11-10T11:55:53.109Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T11:55:53.153Z","updated_at":"2022-11-10T11:55:53.153Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T04:30:15.137Z","updated_at":"2026-08-02T04:30:15.137Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-02-05T06:49:34.815Z","updated_at":"2024-02-05T06:49:34.815Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:18:18.705Z","updated_at":"2024-06-26T18:18:18.705Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695661,"name":"expo-image-loader","ecosystem":"npm","description":"Image loader","homepage":"https://github.com/expo/expo/tree/main/packages/expo-image-loader","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["unimodules","image-loader","expo-image-loader"],"namespace":null,"versions_count":190,"first_release_published_at":"2023-11-23T16:15:28.933Z","latest_release_published_at":"2026-07-15T09:59:04.969Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T00:55:24.363Z","created_at":"2022-04-09T15:17:23.948Z","updated_at":"2026-09-02T00:55:24.363Z","registry_url":"https://www.npmjs.com/package/expo-image-loader","install_command":"npm install expo-image-loader","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"4.6.0","sdk-51":"4.7.0","canary-sdk-55":"55.0.1-canary-20260429-a5e59cf","sdk-55":"55.0.1","canary-sdk-56":"56.0.4-canary-20260701-9100865","next":"57.0.1","latest":"57.0.1","canary":"58.0.0-canary-20260901-2164f24"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-28T02:06:42.999Z","dependent_packages_count":11,"downloads":15733001,"downloads_period":"last-month","dependent_repos_count":6629,"rankings":{"downloads":0.3073286052009456,"dependent_repos_count":0.29169887846907105,"dependent_packages_count":1.908441654154638,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":0.8184598837013881,"average":0.741426710666496},"purl":"pkg:npm/expo-image-loader","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-image-loader","docker_dependents_count":8,"docker_downloads_count":2628,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-image-loader","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-image-loader/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T16:00:21.215Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":680,"past_year_pull_requests_count":1966,"past_year_avg_time_to_close_issue":1412298.4398976981,"past_year_avg_time_to_close_pull_request":727550.3805147059,"past_year_issues_closed_count":391,"past_year_pull_requests_closed_count":1088,"past_year_pull_request_authors_count":387,"past_year_issue_authors_count":551,"past_year_avg_comments_per_issue":2.6220588235294118,"past_year_avg_comments_per_pull_request":2.198880976602238,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":847,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-loader/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-loader/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-loader/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-loader/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-loader/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-loader/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-01T21:02:34.828Z","updated_at":"2026-04-01T21:02:34.828Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T07:31:11.486Z","updated_at":"2026-02-26T07:31:11.486Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T10:23:00.924Z","updated_at":"2022-11-12T10:23:00.924Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T10:23:02.132Z","updated_at":"2022-11-12T10:23:02.132Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T10:23:02.704Z","updated_at":"2022-11-12T10:23:02.704Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T10:23:03.245Z","updated_at":"2022-11-12T10:23:03.245Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-12T10:23:03.585Z","updated_at":"2022-11-12T10:23:03.585Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T10:23:03.826Z","updated_at":"2022-11-12T10:23:03.826Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T10:23:05.175Z","updated_at":"2022-11-12T10:23:05.175Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T15:30:30.244Z","updated_at":"2026-08-01T15:30:30.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-20T00:43:12.816Z","updated_at":"2024-08-20T00:43:12.816Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-20T00:43:12.423Z","updated_at":"2024-08-20T00:43:12.423Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":11073871,"name":"expo-mesh-gradient","ecosystem":"npm","description":"A module that exposes MeshGradient view from SwiftUI to React Native","homepage":"https://docs.expo.dev/versions/latest/sdk/mesh-gradient/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","gradient","mesh","mesh-gradient","react-native"],"namespace":null,"versions_count":153,"first_release_published_at":"2024-11-20T12:57:41.209Z","latest_release_published_at":"2026-07-15T10:05:22.256Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T00:37:19.057Z","created_at":"2024-11-23T01:19:35.192Z","updated_at":"2026-09-02T00:57:15.593Z","registry_url":"https://www.npmjs.com/package/expo-mesh-gradient","install_command":"npm install expo-mesh-gradient","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.4-canary-20260701-9100865","next":"57.0.1","latest":"57.0.1","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T00:57:15.593Z","dependent_packages_count":0,"downloads":164222,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":9.39872924230763,"dependent_repos_count":25.506086133574783,"dependent_packages_count":36.93222171114604,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":23.945679029009483},"purl":"pkg:npm/expo-mesh-gradient","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-mesh-gradient","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-mesh-gradient","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-mesh-gradient/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-mesh-gradient/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-mesh-gradient/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-mesh-gradient/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-mesh-gradient/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-mesh-gradient/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-mesh-gradient/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-09T14:01:01.080Z","updated_at":"2026-04-09T14:01:01.080Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2024-11-23T01:37:41.226Z","updated_at":"2024-11-23T01:37:41.226Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2024-11-29T15:30:16.304Z","updated_at":"2024-11-29T15:30:16.304Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2024-11-29T15:30:16.364Z","updated_at":"2024-11-29T15:30:16.364Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2024-11-29T15:30:16.580Z","updated_at":"2024-11-29T15:30:16.580Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2024-11-29T15:30:16.635Z","updated_at":"2024-11-29T15:30:16.635Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-21T10:53:06.616Z","updated_at":"2025-09-21T10:53:06.616Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2024-11-29T15:30:16.845Z","updated_at":"2024-11-29T15:30:16.845Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2024-11-29T15:30:17.108Z","updated_at":"2024-11-29T15:30:17.108Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-03T04:30:46.535Z","updated_at":"2026-08-03T04:30:46.535Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-11-29T15:30:17.231Z","updated_at":"2024-11-29T15:30:17.231Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-11-29T15:30:17.666Z","updated_at":"2024-11-29T15:30:17.666Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14877259,"name":"submit-expo-feedback","ecosystem":"npm","description":"Send feedback to the Expo team","homepage":"https://docs.expo.dev","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","feedback"],"namespace":null,"versions_count":11,"first_release_published_at":"2026-07-16T13:17:20.203Z","latest_release_published_at":"2026-08-20T10:44:43.433Z","latest_release_number":"0.0.4","last_synced_at":"2026-09-02T01:03:45.317Z","created_at":"2026-08-05T23:26:36.666Z","updated_at":"2026-09-02T01:03:45.317Z","registry_url":"https://www.npmjs.com/package/submit-expo-feedback","install_command":"npm install submit-expo-feedback","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"canary":"0.0.5-canary-20260901-2164f24","next":"0.0.4","latest":"0.0.4"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T15:17:48.716Z","dependent_packages_count":0,"downloads":1069,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":4.930238262839438,"dependent_repos_count":21.37911768268595,"dependent_packages_count":30.810342969469577,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":19.039899638331658},"purl":"pkg:npm/submit-expo-feedback","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/submit-expo-feedback","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/submit-expo-feedback","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/submit-expo-feedback/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/submit-expo-feedback/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/submit-expo-feedback/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/submit-expo-feedback/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/submit-expo-feedback/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/submit-expo-feedback/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/submit-expo-feedback/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-08-05T23:26:36.830Z","updated_at":"2026-08-05T23:26:36.830Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-08-05T23:26:36.828Z","updated_at":"2026-08-05T23:26:36.828Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2026-08-05T23:26:36.818Z","updated_at":"2026-08-05T23:26:36.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2026-08-05T23:26:36.819Z","updated_at":"2026-08-05T23:26:36.819Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2026-08-05T23:26:36.820Z","updated_at":"2026-08-05T23:26:36.820Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2026-08-05T23:26:36.821Z","updated_at":"2026-08-05T23:26:36.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2026-08-05T23:26:36.834Z","updated_at":"2026-08-05T23:26:36.834Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2026-08-05T23:26:36.823Z","updated_at":"2026-08-05T23:26:36.823Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2026-08-05T23:26:36.824Z","updated_at":"2026-08-05T23:26:36.824Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-05T23:26:36.832Z","updated_at":"2026-08-05T23:26:36.832Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2026-08-05T23:26:36.825Z","updated_at":"2026-08-05T23:26:36.825Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2026-08-05T23:26:36.829Z","updated_at":"2026-08-05T23:26:36.829Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695914,"name":"expo-updates-interface","ecosystem":"npm","description":"Native interface for modules that optionally depend on expo-updates, e.g. expo-dev-launcher.","homepage":"https://docs.expo.dev","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-updates-interface"],"namespace":null,"versions_count":207,"first_release_published_at":"2023-11-23T16:19:11.549Z","latest_release_published_at":"2026-07-15T10:03:35.708Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T01:05:26.019Z","created_at":"2022-04-09T15:17:36.549Z","updated_at":"2026-09-02T01:05:26.019Z","registry_url":"https://www.npmjs.com/package/expo-updates-interface","install_command":"npm install expo-updates-interface","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"0.15.3","sdk-51":"0.16.2","canary-sdk-55":"55.1.4-canary-20260429-a5e59cf","canary-sdk-56":"56.0.3-canary-20260701-9100865","latest":"57.0.1","next":"57.0.1","canary":"58.0.0-canary-20260901-2164f24"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T16:52:30.407Z","dependent_packages_count":3,"downloads":18809934,"downloads_period":"last-month","dependent_repos_count":5519,"rankings":{"downloads":0.2899062216396088,"dependent_repos_count":0.3118662678005221,"dependent_packages_count":5.888476794839281,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":0.9087712071601004,"average":1.4202752889854076},"purl":"pkg:npm/expo-updates-interface","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-updates-interface","docker_dependents_count":8,"docker_downloads_count":5519,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-updates-interface","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-updates-interface/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates-interface/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates-interface/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates-interface/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates-interface/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates-interface/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-updates-interface/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T16:01:13.629Z","updated_at":"2026-04-02T16:01:13.629Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T01:31:23.596Z","updated_at":"2026-02-26T01:31:23.596Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T07:20:54.923Z","updated_at":"2022-11-12T07:20:54.923Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T07:20:54.982Z","updated_at":"2022-11-12T07:20:54.982Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T07:20:55.073Z","updated_at":"2022-11-12T07:20:55.073Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T07:20:55.183Z","updated_at":"2022-11-12T07:20:55.183Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-12T07:20:55.223Z","updated_at":"2022-11-12T07:20:55.223Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T07:20:55.335Z","updated_at":"2022-11-12T07:20:55.335Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T07:20:55.448Z","updated_at":"2022-11-12T07:20:55.448Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T05:01:31.369Z","updated_at":"2026-08-02T05:01:31.369Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-10-29T16:25:49.126Z","updated_at":"2024-10-29T16:25:49.126Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-10-29T16:25:48.981Z","updated_at":"2024-10-29T16:25:48.981Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695605,"name":"expo-face-detector","ecosystem":"npm","description":"Lets you use the power of Google Mobile Vision (https://developers.google.com/vision/face-detection-concepts) framework to detect faces on images.","homepage":"https://docs.expo.dev/versions/latest/sdk/facedetector/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","face-detector","face","detection"],"namespace":null,"versions_count":110,"first_release_published_at":"2023-11-23T16:15:06.946Z","latest_release_published_at":"2025-01-10T18:37:24.051Z","latest_release_number":"13.0.2","last_synced_at":"2026-09-01T19:12:08.602Z","created_at":"2022-04-09T15:17:20.919Z","updated_at":"2026-09-02T01:07:40.189Z","registry_url":"https://www.npmjs.com/package/expo-face-detector","install_command":"npm install expo-face-detector","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"12.6.1","sdk-51":"12.7.1","latest":"13.0.2","canary":"13.0.3-canary-20250124-42fe332"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T01:07:40.189Z","dependent_packages_count":11,"downloads":14728,"downloads_period":"last-month","dependent_repos_count":9613,"rankings":{"downloads":1.6923525518337064,"dependent_repos_count":0.2513080792802483,"dependent_packages_count":1.908441654154638,"stargazers_count":0.5669562089981925,"forks_count":0.5222798020344991,"docker_downloads_count":null,"average":0.9882676592602568},"purl":"pkg:npm/expo-face-detector","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-face-detector","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-face-detector","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-face-detector/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-face-detector/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-face-detector/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-face-detector/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-face-detector/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-face-detector/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-face-detector/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T22:30:25.720Z","updated_at":"2026-04-03T22:30:25.720Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-12T10:23:01.593Z","updated_at":"2022-11-12T10:23:01.593Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T10:23:02.395Z","updated_at":"2022-11-12T10:23:02.395Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T10:23:03.702Z","updated_at":"2022-11-12T10:23:03.702Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T10:23:04.885Z","updated_at":"2022-11-12T10:23:04.885Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T10:23:06.052Z","updated_at":"2022-11-12T10:23:06.052Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-12T10:23:06.265Z","updated_at":"2022-11-12T10:23:06.265Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T10:23:06.670Z","updated_at":"2022-11-12T10:23:06.670Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T10:23:07.950Z","updated_at":"2022-11-12T10:23:07.950Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T19:30:13.257Z","updated_at":"2026-08-01T19:30:13.257Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T06:13:05.522Z","updated_at":"2024-01-27T06:13:05.522Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:39.967Z","updated_at":"2024-06-26T18:19:39.967Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":12070419,"name":"expo-glass-effect","ecosystem":"npm","description":"A component that renders a native glass effect view on iOS.","homepage":"https://docs.expo.dev/versions/latest/sdk/glass-effect/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["apple","expo","expo-glass-effect","liquid-glass","react-native"],"namespace":null,"versions_count":106,"first_release_published_at":"2025-09-03T16:55:32.490Z","latest_release_published_at":"2026-07-15T10:03:09.748Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T01:11:44.031Z","created_at":"2025-09-03T16:55:48.428Z","updated_at":"2026-09-02T01:11:44.032Z","registry_url":"https://www.npmjs.com/package/expo-glass-effect","install_command":"npm install expo-glass-effect","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-54":"0.1.10","canary-sdk-55":"55.0.8-canary-20260429-a5e59cf","canary-sdk-56":"56.0.5-canary-20260701-9100865","latest":"57.0.1","next":"57.0.1","canary":"58.0.0-canary-20260901-2164f24"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T17:10:36.210Z","dependent_packages_count":0,"downloads":14127644,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":23.91665727542819,"dependent_packages_count":34.501570903980465,"stargazers_count":0.3392159355068627,"forks_count":0.30110288068410884,"docker_downloads_count":null,"average":14.764636748899907},"purl":"pkg:npm/expo-glass-effect","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-glass-effect","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-glass-effect","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-glass-effect/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T18:01:20.292Z","issues_count":7120,"pull_requests_count":16594,"avg_time_to_close_issue":4996951.38918825,"avg_time_to_close_pull_request":1682296.0511073254,"issues_closed_count":5751,"pull_requests_closed_count":13501,"pull_request_authors_count":1445,"issue_authors_count":4909,"avg_comments_per_issue":4.505477528089887,"avg_comments_per_pull_request":1.5916596360130169,"merged_pull_requests_count":11781,"bot_issues_count":1,"bot_pull_requests_count":211,"past_year_issues_count":662,"past_year_pull_requests_count":1892,"past_year_avg_time_to_close_issue":1234415.02425876,"past_year_avg_time_to_close_pull_request":634989.510576923,"past_year_issues_closed_count":371,"past_year_pull_requests_closed_count":1040,"past_year_pull_request_authors_count":358,"past_year_issue_authors_count":542,"past_year_avg_comments_per_issue":2.516616314199396,"past_year_avg_comments_per_pull_request":2.043340380549683,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":31,"past_year_merged_pull_requests_count":815,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":236,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":167,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"expo-bot","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"intergalacticspacehighway","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"brentvatne","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-glass-effect/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-glass-effect/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-glass-effect/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-glass-effect/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-glass-effect/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-glass-effect/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-10T20:41:28.706Z","updated_at":"2026-04-10T20:41:28.706Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-03-07T07:23:54.856Z","updated_at":"2026-03-07T07:23:54.856Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2025-09-04T03:05:35.060Z","updated_at":"2025-09-04T03:05:35.060Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2025-09-04T03:05:35.128Z","updated_at":"2025-09-04T03:05:35.128Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2025-09-04T03:05:35.346Z","updated_at":"2025-09-04T03:05:35.346Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2025-09-04T03:05:35.535Z","updated_at":"2025-09-04T03:05:35.535Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-23T17:53:27.420Z","updated_at":"2025-09-23T17:53:27.420Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2025-09-04T03:05:35.684Z","updated_at":"2025-09-04T03:05:35.684Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2025-09-04T03:05:35.960Z","updated_at":"2025-09-04T03:05:35.960Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T13:53:31.571Z","updated_at":"2026-08-06T13:53:31.571Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2025-09-04T03:05:36.093Z","updated_at":"2025-09-04T03:05:36.093Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2025-09-04T03:05:36.480Z","updated_at":"2025-09-04T03:05:36.480Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":12402540,"name":"expo-app-metrics","ecosystem":"npm","description":"Expo module that collects app startup, frame rate, memory, and session metrics","homepage":"https://docs.expo.dev/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-app-metrics","ExpoAppMetrics","metrics"],"namespace":null,"versions_count":86,"first_release_published_at":"2025-10-20T20:03:58.471Z","latest_release_published_at":"2026-09-01T16:17:01.514Z","latest_release_number":"57.0.16","last_synced_at":"2026-09-01T16:18:58.427Z","created_at":"2025-10-20T20:05:09.916Z","updated_at":"2026-09-02T01:25:23.538Z","registry_url":"https://www.npmjs.com/package/expo-app-metrics","install_command":"npm install expo-app-metrics","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"canary-sdk-55":"0.1.10-canary-20260429-a5e59cf","canary-sdk-56":"56.0.15-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"0.2.6","latest":"57.0.15","next":"57.0.16","sdk-56":"56.0.26"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T01:25:23.538Z","dependent_packages_count":0,"downloads":706610,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":23.6129323413166,"dependent_packages_count":34.06217440659262,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":28.83755337395461},"purl":"pkg:npm/expo-app-metrics","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-app-metrics","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-app-metrics","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-app-metrics/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-metrics/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-metrics/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-metrics/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-metrics/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-metrics/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-app-metrics/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-17T17:01:34.297Z","updated_at":"2026-04-17T17:01:34.297Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2025-10-22T23:28:10.752Z","updated_at":"2025-10-22T23:28:10.752Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2026-04-17T17:01:33.298Z","updated_at":"2026-04-17T17:01:33.298Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2026-04-17T17:01:33.552Z","updated_at":"2026-04-17T17:01:33.552Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2026-04-17T17:01:33.913Z","updated_at":"2026-04-17T17:01:33.913Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2026-04-17T17:01:33.985Z","updated_at":"2026-04-17T17:01:33.985Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2026-04-17T17:01:34.358Z","updated_at":"2026-04-17T17:01:34.358Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2026-04-17T17:01:34.059Z","updated_at":"2026-04-17T17:01:34.059Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2026-04-17T17:01:34.126Z","updated_at":"2026-04-17T17:01:34.126Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T11:22:24.318Z","updated_at":"2026-08-06T11:22:24.318Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2026-04-17T17:01:34.218Z","updated_at":"2026-04-17T17:01:34.218Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2026-04-17T17:01:34.257Z","updated_at":"2026-04-17T17:01:34.257Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695653,"name":"expo-haptics","ecosystem":"npm","description":"Provides access to the system's haptics engine on iOS, vibration effects on Android, and Web Vibration API on web.","homepage":"https://docs.expo.dev/versions/latest/sdk/haptics/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","expo-haptics","haptics","react-native"],"namespace":null,"versions_count":239,"first_release_published_at":"2023-11-23T16:15:26.405Z","latest_release_published_at":"2026-08-26T20:02:37.668Z","latest_release_number":"57.0.2","last_synced_at":"2026-09-02T01:30:46.486Z","created_at":"2022-04-09T15:17:23.485Z","updated_at":"2026-09-02T01:30:46.487Z","registry_url":"https://www.npmjs.com/package/expo-haptics","install_command":"npm install expo-haptics","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"12.8.1","sdk-51":"13.0.1","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.4-canary-20260701-9100865","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.18","next":"57.0.2","latest":"57.0.2"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-31T01:44:54.430Z","dependent_packages_count":60,"downloads":16510396,"downloads_period":"last-month","dependent_repos_count":4928,"rankings":{"downloads":0.4455312426473059,"dependent_repos_count":0.3264596148028638,"dependent_packages_count":0.5224362271029522,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":0.9087712071601004,"average":0.5543049223643592},"purl":"pkg:npm/expo-haptics","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-haptics","docker_dependents_count":6,"docker_downloads_count":1471,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-haptics","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-haptics/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-haptics/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-haptics/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-haptics/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-haptics/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-haptics/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-haptics/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T03:31:27.839Z","updated_at":"2026-04-03T03:31:27.839Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T17:01:14.957Z","updated_at":"2026-02-26T17:01:14.957Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T21:03:18.924Z","updated_at":"2022-11-08T21:03:18.924Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T21:03:19.207Z","updated_at":"2022-11-08T21:03:19.207Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T21:03:19.323Z","updated_at":"2022-11-08T21:03:19.323Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T21:03:19.397Z","updated_at":"2022-11-08T21:03:19.397Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-08T21:03:19.414Z","updated_at":"2022-11-08T21:03:19.414Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T21:03:19.449Z","updated_at":"2022-11-08T21:03:19.449Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T21:03:19.644Z","updated_at":"2022-11-08T21:03:19.644Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T10:10:45.192Z","updated_at":"2026-08-01T10:10:45.192Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:31:39.301Z","updated_at":"2024-01-27T00:31:39.301Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:16:24.404Z","updated_at":"2024-06-26T18:16:24.404Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695524,"name":"expo-auth-session","ecosystem":"npm","description":"Expo module for browser-based authentication","homepage":"https://docs.expo.dev/versions/latest/sdk/auth-session","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-auth-session","auth","oauth","authentication","auth-session"],"namespace":null,"versions_count":276,"first_release_published_at":"2023-11-23T16:12:59.275Z","latest_release_published_at":"2026-09-01T16:17:34.812Z","latest_release_number":"57.0.11","last_synced_at":"2026-09-01T16:22:01.826Z","created_at":"2022-04-09T15:17:15.948Z","updated_at":"2026-09-02T01:32:05.314Z","registry_url":"https://www.npmjs.com/package/expo-auth-session","install_command":"npm install expo-auth-session","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"5.4.0","sdk-51":"5.5.2","sdk-54":"7.0.11","canary-sdk-55":"55.0.7-canary-20260429-a5e59cf","canary-sdk-56":"56.0.13-canary-20260701-9100865","canary":"58.0.0-canary-20260812-27f94d4","sdk-55":"55.0.18","latest":"57.0.10","next":"57.0.11","sdk-56":"56.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T01:32:05.314Z","dependent_packages_count":42,"downloads":6836112,"downloads_period":"last-month","dependent_repos_count":1184,"rankings":{"downloads":0.5617296295785462,"dependent_repos_count":0.5908005596180618,"dependent_packages_count":0.7600475503958317,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":0.9142836779643093,"average":0.6640989557922297},"purl":"pkg:npm/expo-auth-session","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-auth-session","docker_dependents_count":6,"docker_downloads_count":1503,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-auth-session","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-auth-session/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-auth-session/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-auth-session/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-auth-session/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-auth-session/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-auth-session/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-auth-session/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T16:00:43.675Z","updated_at":"2026-04-02T16:00:43.675Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-20T02:03:36.864Z","updated_at":"2022-11-20T02:03:36.864Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-20T02:03:36.615Z","updated_at":"2022-11-20T02:03:36.615Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-20T02:03:36.645Z","updated_at":"2022-11-20T02:03:36.645Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-20T02:03:36.795Z","updated_at":"2022-11-20T02:03:36.795Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-20T02:03:37.080Z","updated_at":"2022-11-20T02:03:37.080Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-20T02:03:37.129Z","updated_at":"2022-11-20T02:03:37.129Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-20T02:03:37.231Z","updated_at":"2022-11-20T02:03:37.231Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-20T02:03:37.335Z","updated_at":"2022-11-20T02:03:37.335Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T14:00:48.445Z","updated_at":"2026-08-02T14:00:48.445Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-10-29T16:25:44.188Z","updated_at":"2024-10-29T16:25:44.188Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-10-29T16:25:44.071Z","updated_at":"2024-10-29T16:25:44.071Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695712,"name":"expo-localization","ecosystem":"npm","description":"Provides an interface for native user localization information.","homepage":"https://docs.expo.dev/versions/latest/sdk/localization/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","l10n","locales","localization","react-native"],"namespace":null,"versions_count":251,"first_release_published_at":"2023-11-23T16:16:15.507Z","latest_release_published_at":"2026-07-15T10:05:28.437Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T01:37:15.046Z","created_at":"2022-04-09T15:17:26.518Z","updated_at":"2026-09-02T01:37:15.046Z","registry_url":"https://www.npmjs.com/package/expo-localization","install_command":"npm install expo-localization","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"14.8.3","sdk-51":"15.0.3","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","sdk-54":"17.0.9","canary-sdk-56":"56.0.7-canary-20260701-9100865","next":"57.0.1","latest":"57.0.1","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.19"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-27T01:46:43.213Z","dependent_packages_count":85,"downloads":9101015,"downloads_period":"last-month","dependent_repos_count":10122,"rankings":{"downloads":0.43460795345485304,"dependent_repos_count":0.26300605606428235,"dependent_packages_count":0.4575660646932884,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":null,"average":0.4625824782818106},"purl":"pkg:npm/expo-localization","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-localization","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-localization","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-localization/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-26T16:18:26.506Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":684,"past_year_pull_requests_count":1983,"past_year_avg_time_to_close_issue":1408695.6530612244,"past_year_avg_time_to_close_pull_request":723520.6672743846,"past_year_issues_closed_count":392,"past_year_pull_requests_closed_count":1097,"past_year_pull_request_authors_count":390,"past_year_issue_authors_count":554,"past_year_avg_comments_per_issue":2.6140350877192984,"past_year_avg_comments_per_pull_request":2.188603126575895,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":853,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":186,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-localization/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-localization/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-localization/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-localization/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-localization/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-localization/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T07:11:53.923Z","updated_at":"2026-04-02T07:11:53.923Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-10T11:50:05.917Z","updated_at":"2022-11-10T11:50:05.917Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T11:50:05.938Z","updated_at":"2022-11-10T11:50:05.938Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T11:50:05.983Z","updated_at":"2022-11-10T11:50:05.983Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T11:50:05.995Z","updated_at":"2022-11-10T11:50:05.995Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T11:50:06.002Z","updated_at":"2022-11-10T11:50:06.002Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T11:14:36.669Z","updated_at":"2025-09-20T11:14:36.669Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T11:50:06.009Z","updated_at":"2022-11-10T11:50:06.009Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T11:50:06.035Z","updated_at":"2022-11-10T11:50:06.035Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-03T13:30:22.814Z","updated_at":"2026-08-03T13:30:22.814Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-19T21:45:18.847Z","updated_at":"2024-08-19T21:45:18.847Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-19T21:45:18.107Z","updated_at":"2024-08-19T21:45:18.107Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695510,"name":"expo-apple-authentication","ecosystem":"npm","description":"A package that provides 'Sign in with Apple' capability for Expo and React Native apps.","homepage":"https://docs.expo.dev/versions/latest/sdk/apple-authentication/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["apple-authentication","expo","expo-apple-authentiocation","react-native","sign-in-with-apple"],"namespace":null,"versions_count":223,"first_release_published_at":"2023-11-23T16:12:44.414Z","latest_release_published_at":"2026-07-15T10:06:26.656Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T01:47:38.602Z","created_at":"2022-04-09T15:17:15.098Z","updated_at":"2026-09-02T01:47:38.602Z","registry_url":"https://www.npmjs.com/package/expo-apple-authentication","install_command":"npm install expo-apple-authentication","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"6.3.0","sdk-51":"6.4.1","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.5-canary-20260701-9100865","next":"57.0.1","latest":"57.0.1","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.17"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-28T04:02:47.687Z","dependent_packages_count":23,"downloads":5794983,"downloads_period":"last-month","dependent_repos_count":355,"rankings":{"downloads":0.6383538928663463,"dependent_repos_count":0.867232658149515,"dependent_packages_count":1.0547403372424038,"stargazers_count":0.5669562089981925,"forks_count":0.5222798020344991,"docker_downloads_count":null,"average":0.7299125798581914},"purl":"pkg:npm/expo-apple-authentication","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-apple-authentication","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-apple-authentication","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-apple-authentication/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T16:00:21.215Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":680,"past_year_pull_requests_count":1966,"past_year_avg_time_to_close_issue":1412298.4398976981,"past_year_avg_time_to_close_pull_request":727550.3805147059,"past_year_issues_closed_count":391,"past_year_pull_requests_closed_count":1088,"past_year_pull_request_authors_count":387,"past_year_issue_authors_count":551,"past_year_avg_comments_per_issue":2.6220588235294118,"past_year_avg_comments_per_pull_request":2.198880976602238,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":847,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-apple-authentication/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-apple-authentication/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-apple-authentication/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-apple-authentication/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-apple-authentication/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-apple-authentication/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T03:01:15.138Z","updated_at":"2026-04-03T03:01:15.138Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-14T10:48:11.244Z","updated_at":"2022-11-14T10:48:11.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-14T10:48:13.969Z","updated_at":"2022-11-14T10:48:13.969Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-14T10:48:14.831Z","updated_at":"2022-11-14T10:48:14.831Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-14T10:48:15.112Z","updated_at":"2022-11-14T10:48:15.112Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-14T10:48:15.500Z","updated_at":"2022-11-14T10:48:15.500Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-14T10:48:15.601Z","updated_at":"2022-11-14T10:48:15.601Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-14T10:48:15.716Z","updated_at":"2022-11-14T10:48:15.716Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-14T10:48:16.031Z","updated_at":"2022-11-14T10:48:16.031Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T10:30:40.754Z","updated_at":"2026-08-01T10:30:40.754Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-19T21:23:43.721Z","updated_at":"2024-08-19T21:23:43.721Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-19T21:23:43.310Z","updated_at":"2024-08-19T21:23:43.310Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":7862704,"name":"expo-network-addons","ecosystem":"npm","description":"Expo module that provides extra functionalities for networking","homepage":"https://docs.expo.dev/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["EAS","ExpoNetworkAddons","addons","expo","expo-network-addons","network","react-native"],"namespace":null,"versions_count":208,"first_release_published_at":"2023-11-23T16:17:06.506Z","latest_release_published_at":"2026-07-15T10:05:09.582Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T01:49:03.176Z","created_at":"2023-06-28T06:18:54.057Z","updated_at":"2026-09-02T01:49:03.177Z","registry_url":"https://www.npmjs.com/package/expo-network-addons","install_command":"npm install expo-network-addons","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"0.5.0","sdk-51":"0.6.0","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.6-canary-20260701-9100865","next":"57.0.1","latest":"57.0.1","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.17"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-29T08:09:15.328Z","dependent_packages_count":0,"downloads":73807,"downloads_period":"last-month","dependent_repos_count":3,"rankings":{"downloads":5.720683793740813,"dependent_repos_count":6.340698196418392,"dependent_packages_count":51.836728746128266,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":13.004148395752079},"purl":"pkg:npm/expo-network-addons","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-network-addons","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-network-addons","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-network-addons/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-28T11:00:27.046Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":679,"past_year_pull_requests_count":1955,"past_year_avg_time_to_close_issue":1415919.6871794872,"past_year_avg_time_to_close_pull_request":725105.6645101664,"past_year_issues_closed_count":390,"past_year_pull_requests_closed_count":1082,"past_year_pull_request_authors_count":385,"past_year_issue_authors_count":550,"past_year_avg_comments_per_issue":2.6244477172312224,"past_year_avg_comments_per_pull_request":2.20460358056266,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":843,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":117,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":93,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network-addons/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network-addons/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network-addons/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network-addons/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network-addons/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-network-addons/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-07T10:14:11.258Z","updated_at":"2026-04-07T10:14:11.258Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-03-07T07:23:50.808Z","updated_at":"2026-03-07T07:23:50.808Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2023-06-28T09:53:10.256Z","updated_at":"2023-06-28T09:53:10.256Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2023-06-28T09:53:10.273Z","updated_at":"2023-06-28T09:53:10.273Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2023-06-28T09:53:10.346Z","updated_at":"2023-06-28T09:53:10.346Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2023-06-28T09:53:10.385Z","updated_at":"2023-06-28T09:53:10.385Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2023-06-28T09:53:10.404Z","updated_at":"2023-06-28T09:53:10.404Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2023-06-28T09:53:10.462Z","updated_at":"2023-06-28T09:53:10.462Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2023-06-28T09:53:10.570Z","updated_at":"2023-06-28T09:53:10.570Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T13:48:14.274Z","updated_at":"2026-08-06T13:48:14.274Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-26T02:14:09.524Z","updated_at":"2024-08-26T02:14:09.524Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-26T02:14:09.414Z","updated_at":"2024-08-26T02:14:09.414Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":8547574,"name":"expo-image-picker-fix-svg","ecosystem":"npm","description":"Provides access to the system's UI for selecting images and videos from the phone's library or taking a photo with the camera.","homepage":"https://docs.expo.dev/versions/latest/sdk/imagepicker/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","image","picker","image-picker"],"namespace":null,"versions_count":3,"first_release_published_at":"2023-11-06T11:01:13.419Z","latest_release_published_at":"2023-11-06T13:30:59.814Z","latest_release_number":"14.6.3","last_synced_at":"2026-08-31T09:22:57.213Z","created_at":"2023-11-06T11:10:15.883Z","updated_at":"2026-08-31T09:22:57.213Z","registry_url":"https://www.npmjs.com/package/expo-image-picker-fix-svg","install_command":"npm install expo-image-picker-fix-svg","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"14.6.3"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T01:44:19.072Z","dependent_packages_count":0,"downloads":15,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":37.0470346257798,"dependent_packages_count":53.06542381217342,"stargazers_count":0.6066689103359498,"forks_count":0.5427300015977645,"docker_downloads_count":null,"average":22.815464337471735},"purl":"pkg:npm/expo-image-picker-fix-svg","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-image-picker-fix-svg","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-image-picker-fix-svg","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-image-picker-fix-svg/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-picker-fix-svg/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-picker-fix-svg/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-picker-fix-svg/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-picker-fix-svg/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-picker-fix-svg/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-image-picker-fix-svg/codemeta","maintainers":[{"uuid":"kitolog","login":"kitolog","name":null,"email":"nikita.kosilo@gmail.com","url":null,"packages_count":18,"html_url":"https://www.npmjs.com/~kitolog","role":null,"created_at":"2023-11-06T11:10:44.659Z","updated_at":"2023-11-06T11:10:44.659Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kitolog/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695512,"name":"expo-application","ecosystem":"npm","description":"A universal module that gets native application information such as its ID, app name, and build version at runtime","homepage":"https://docs.expo.dev/versions/latest/sdk/application/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","expo-application","react-native"],"namespace":null,"versions_count":232,"first_release_published_at":"2023-11-23T16:12:48.871Z","latest_release_published_at":"2026-07-17T10:54:07.331Z","latest_release_number":"57.0.2","last_synced_at":"2026-09-02T02:00:02.052Z","created_at":"2022-04-09T15:17:15.303Z","updated_at":"2026-09-02T02:00:02.053Z","registry_url":"https://www.npmjs.com/package/expo-application","install_command":"npm install expo-application","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"5.8.3","sdk-51":"5.9.1","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.4-canary-20260701-9100865","next":"57.0.2","latest":"57.0.2","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.19"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-29T21:22:52.564Z","dependent_packages_count":76,"downloads":21208629,"downloads_period":"last-month","dependent_repos_count":69038,"rankings":{"downloads":0.2223471212685452,"dependent_repos_count":0.12436267005043469,"dependent_packages_count":0.5168159195399821,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":0.8452052920599559,"average":0.4777438866859245},"purl":"pkg:npm/expo-application","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-application","docker_dependents_count":46,"docker_downloads_count":177307,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-application","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-application/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-29T11:47:15.798Z","issues_count":7173,"pull_requests_count":16787,"avg_time_to_close_issue":4984450.26026216,"avg_time_to_close_pull_request":1687856.7081740664,"issues_closed_count":5796,"pull_requests_closed_count":13604,"pull_request_authors_count":1494,"issue_authors_count":4942,"avg_comments_per_issue":4.503694409591524,"avg_comments_per_pull_request":1.6120807767915648,"merged_pull_requests_count":11855,"bot_issues_count":1,"bot_pull_requests_count":220,"past_year_issues_count":679,"past_year_pull_requests_count":1982,"past_year_avg_time_to_close_issue":1412504.5333333334,"past_year_avg_time_to_close_pull_request":721037.1230342275,"past_year_issues_closed_count":390,"past_year_pull_requests_closed_count":1081,"past_year_pull_request_authors_count":391,"past_year_issue_authors_count":549,"past_year_avg_comments_per_issue":2.6318114874815906,"past_year_avg_comments_per_pull_request":2.213420787083754,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":40,"past_year_merged_pull_requests_count":845,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":552,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":161,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"expo-bot","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":193,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":93,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"ramonclaudio","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"hirbod","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-application/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-application/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-application/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-application/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-application/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-application/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T11:08:57.890Z","updated_at":"2026-04-02T11:08:57.890Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-10T11:35:17.085Z","updated_at":"2022-11-10T11:35:17.085Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T11:35:17.043Z","updated_at":"2022-11-10T11:35:17.043Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T11:35:17.060Z","updated_at":"2022-11-10T11:35:17.060Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T11:35:17.082Z","updated_at":"2022-11-10T11:35:17.082Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T11:35:17.092Z","updated_at":"2022-11-10T11:35:17.092Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T11:35:17.095Z","updated_at":"2022-11-10T11:35:17.095Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T11:35:17.100Z","updated_at":"2022-11-10T11:35:17.100Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T11:35:17.132Z","updated_at":"2022-11-10T11:35:17.132Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T10:15:49.279Z","updated_at":"2026-08-01T10:15:49.279Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2026-02-11T17:02:02.380Z","updated_at":"2026-02-11T17:02:02.380Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2026-02-11T17:02:02.940Z","updated_at":"2026-02-11T17:02:02.940Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1230407,"name":"expo-battery","ecosystem":"npm","description":"Provides battery information for the physical device, as well as corresponding event listeners.","homepage":"https://docs.expo.dev/versions/latest/sdk/battery/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","expo-battery","react-native"],"namespace":null,"versions_count":223,"first_release_published_at":"2023-11-23T16:13:23.283Z","latest_release_published_at":"2026-08-14T14:23:15.102Z","latest_release_number":"57.0.2","last_synced_at":"2026-09-02T02:00:08.505Z","created_at":"2022-04-08T14:19:35.791Z","updated_at":"2026-09-02T02:00:08.506Z","registry_url":"https://www.npmjs.com/package/expo-battery","install_command":"npm install expo-battery","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"7.7.2","sdk-51":"8.0.1","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.5-canary-20260701-9100865","canary":"58.0.0-canary-20260901-2164f24","next":"57.0.2","latest":"57.0.2","sdk-55":"55.0.17"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-27T04:06:37.102Z","dependent_packages_count":9,"downloads":1331455,"downloads_period":"last-month","dependent_repos_count":82,"rankings":{"downloads":1.6094736394332971,"dependent_repos_count":1.5905085069199465,"dependent_packages_count":2.197368825738816,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":null,"average":1.3110166578577378},"purl":"pkg:npm/expo-battery","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-battery","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-battery","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-battery/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T02:00:14.697Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":684,"past_year_pull_requests_count":1974,"past_year_avg_time_to_close_issue":1408695.6530612244,"past_year_avg_time_to_close_pull_request":726734.2550458716,"past_year_issues_closed_count":392,"past_year_pull_requests_closed_count":1090,"past_year_pull_request_authors_count":389,"past_year_issue_authors_count":554,"past_year_avg_comments_per_issue":2.6140350877192984,"past_year_avg_comments_per_pull_request":2.1930091185410334,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":849,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-battery/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-battery/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-battery/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-battery/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-battery/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-battery/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T16:00:13.290Z","updated_at":"2026-04-02T16:00:13.290Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-10T19:10:12.811Z","updated_at":"2022-11-10T19:10:12.811Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T19:10:12.750Z","updated_at":"2022-11-10T19:10:12.750Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T19:10:12.759Z","updated_at":"2022-11-10T19:10:12.759Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T19:10:12.800Z","updated_at":"2022-11-10T19:10:12.800Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T19:10:12.843Z","updated_at":"2022-11-10T19:10:12.843Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T19:10:12.849Z","updated_at":"2022-11-10T19:10:12.849Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T19:10:12.869Z","updated_at":"2022-11-10T19:10:12.869Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T19:10:12.935Z","updated_at":"2022-11-10T19:10:12.935Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-03T05:30:19.085Z","updated_at":"2026-08-03T05:30:19.085Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-02-05T06:50:02.028Z","updated_at":"2024-02-05T06:50:02.028Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:18:15.216Z","updated_at":"2024-06-26T18:18:15.216Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":930001,"name":"@expo/html-elements","ecosystem":"npm","description":"Universal semantic HTML React components for iOS, Android, web, and desktop","homepage":"https://github.com/expo/expo/tree/main/packages/html-elements","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","expo-web","html","react-native","react-native-web"],"namespace":"expo","versions_count":218,"first_release_published_at":"2020-02-12T00:09:43.367Z","latest_release_published_at":"2026-06-25T19:29:13.161Z","latest_release_number":"57.0.0","last_synced_at":"2026-09-02T18:45:17.257Z","created_at":"2022-04-07T17:09:20.393Z","updated_at":"2026-09-02T18:45:17.257Z","registry_url":"https://www.npmjs.com/package/@expo/html-elements","install_command":"npm install @expo/html-elements","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"0.9.1","sdk-51":"0.10.1","canary-sdk-55":"55.0.4-canary-20260429-a5e59cf","latest":"57.0.0","next":"57.0.0","canary-sdk-56":"56.0.2-canary-20260701-9100865","canary":"58.0.0-canary-20260902-26df09e"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T02:13:08.967Z","dependent_packages_count":34,"downloads":971460,"downloads_period":"last-month","dependent_repos_count":129,"rankings":{"downloads":0.9696787348645594,"dependent_repos_count":1.344630313728994,"dependent_packages_count":1.0000348285038758,"stargazers_count":0.6031767690449568,"forks_count":0.5481971922735139,"docker_downloads_count":1.641515789954494,"average":1.0178722713950656},"purl":"pkg:npm/%40expo/html-elements","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@expo/html-elements","docker_dependents_count":2,"docker_downloads_count":36,"usage_url":"https://repos.ecosyste.ms/usage/npm/@expo/html-elements","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@expo/html-elements/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fhtml-elements/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fhtml-elements/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fhtml-elements/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fhtml-elements/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fhtml-elements/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Fhtml-elements/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T21:01:12.655Z","updated_at":"2026-04-02T21:01:12.655Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T15:00:28.293Z","updated_at":"2026-02-25T15:00:28.293Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-16T17:56:08.767Z","updated_at":"2022-11-16T17:56:08.767Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-16T17:56:08.774Z","updated_at":"2022-11-16T17:56:08.774Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-16T17:56:08.797Z","updated_at":"2022-11-16T17:56:08.797Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-16T17:56:08.827Z","updated_at":"2022-11-16T17:56:08.827Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-16T17:56:08.832Z","updated_at":"2022-11-16T17:56:08.832Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-16T17:56:08.842Z","updated_at":"2022-11-16T17:56:08.842Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-16T17:56:08.882Z","updated_at":"2022-11-16T17:56:08.882Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T10:09:08.665Z","updated_at":"2026-08-01T10:09:08.665Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:28:14.424Z","updated_at":"2024-01-27T00:28:14.424Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:17:38.331Z","updated_at":"2024-06-26T18:17:38.331Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695929,"name":"expo-video-thumbnails","ecosystem":"npm","description":"Provides function that let you generate an image from video.","homepage":"https://docs.expo.dev/versions/latest/sdk/video-thumbnails/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["android","expo","expo-video-thumbnails","ios","react-native","thumbnail"],"namespace":null,"versions_count":240,"first_release_published_at":"2023-11-23T16:19:27.147Z","latest_release_published_at":"2026-07-15T10:04:02.092Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T00:41:43.709Z","created_at":"2022-04-09T15:17:37.119Z","updated_at":"2026-09-02T02:21:28.338Z","registry_url":"https://www.npmjs.com/package/expo-video-thumbnails","install_command":"npm install expo-video-thumbnails","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"7.9.0","sdk-51":"8.0.0","canary-sdk-55":"55.0.10-canary-20260429-a5e59cf","canary-sdk-56":"56.0.4-canary-20260701-9100865","latest":"57.0.1","next":"57.0.1","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.19"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T02:21:28.338Z","dependent_packages_count":8,"downloads":1009654,"downloads_period":"last-month","dependent_repos_count":125,"rankings":{"downloads":1.1798061461753926,"dependent_repos_count":1.3570316233600714,"dependent_packages_count":2.421390119783199,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":null,"average":1.2231920413030584},"purl":"pkg:npm/expo-video-thumbnails","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-video-thumbnails","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-video-thumbnails","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-video-thumbnails/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video-thumbnails/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video-thumbnails/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video-thumbnails/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video-thumbnails/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video-thumbnails/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-video-thumbnails/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T22:01:16.580Z","updated_at":"2026-04-03T22:01:16.580Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T19:01:17.592Z","updated_at":"2026-02-25T19:01:17.592Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T10:42:59.402Z","updated_at":"2022-11-12T10:42:59.402Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T10:42:59.787Z","updated_at":"2022-11-12T10:42:59.787Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T10:43:00.102Z","updated_at":"2022-11-12T10:43:00.102Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T10:43:00.189Z","updated_at":"2022-11-12T10:43:00.189Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-12T10:43:00.246Z","updated_at":"2022-11-12T10:43:00.246Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T10:43:00.298Z","updated_at":"2022-11-12T10:43:00.298Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T10:43:00.625Z","updated_at":"2022-11-12T10:43:00.625Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-03T05:00:33.001Z","updated_at":"2026-08-03T05:00:33.001Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:32:11.535Z","updated_at":"2024-01-27T00:32:11.535Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:16:59.404Z","updated_at":"2024-06-26T18:16:59.404Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695936,"name":"expo-web-browser","ecosystem":"npm","description":"Provides access to the system's web browser and supports handling redirects. On iOS, it uses SFSafariViewController or ASWebAuthenticationSession, depending on the method you call, and on Android it uses ChromeCustomTabs. As of iOS 11, SFSafariViewControl","homepage":"https://docs.expo.dev/versions/latest/sdk/webbrowser/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["browser","expo","expo-web-browser","react-native","web"],"namespace":null,"versions_count":268,"first_release_published_at":"2023-11-23T16:19:35.765Z","latest_release_published_at":"2026-07-22T16:20:07.732Z","latest_release_number":"57.0.2","last_synced_at":"2026-09-02T02:27:11.629Z","created_at":"2022-04-09T15:17:37.550Z","updated_at":"2026-09-02T02:27:11.629Z","registry_url":"https://www.npmjs.com/package/expo-web-browser","install_command":"npm install expo-web-browser","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"12.8.2","sdk-51":"13.0.3","sdk-54":"15.0.11","canary-sdk-55":"55.0.10-canary-20260429-a5e59cf","canary-sdk-56":"56.0.6-canary-20260701-9100865","latest":"57.0.2","next":"57.0.2","sdk-56":"56.0.6","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.20"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-27T04:10:50.580Z","dependent_packages_count":140,"downloads":19427666,"downloads_period":"last-month","dependent_repos_count":64172,"rankings":{"downloads":0.3394843870794259,"dependent_repos_count":0.11904361758148184,"dependent_packages_count":0.28879219515694426,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":0.825910613648841,"average":0.44931034265660436},"purl":"pkg:npm/expo-web-browser","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-web-browser","docker_dependents_count":8,"docker_downloads_count":3207,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-web-browser","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-web-browser/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T02:00:14.697Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":684,"past_year_pull_requests_count":1974,"past_year_avg_time_to_close_issue":1408695.6530612244,"past_year_avg_time_to_close_pull_request":726734.2550458716,"past_year_issues_closed_count":392,"past_year_pull_requests_closed_count":1090,"past_year_pull_request_authors_count":389,"past_year_issue_authors_count":554,"past_year_avg_comments_per_issue":2.6140350877192984,"past_year_avg_comments_per_pull_request":2.1930091185410334,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":849,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-web-browser/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-web-browser/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-web-browser/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-web-browser/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-web-browser/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-web-browser/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T19:01:28.488Z","updated_at":"2026-04-03T19:01:28.488Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-27T22:30:43.455Z","updated_at":"2026-02-27T22:30:43.455Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T21:03:18.941Z","updated_at":"2022-11-08T21:03:18.941Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T21:03:19.388Z","updated_at":"2022-11-08T21:03:19.388Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T21:03:19.498Z","updated_at":"2022-11-08T21:03:19.498Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T21:03:19.675Z","updated_at":"2022-11-08T21:03:19.675Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T02:11:33.819Z","updated_at":"2025-09-20T02:11:33.819Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T21:03:19.749Z","updated_at":"2022-11-08T21:03:19.749Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T21:03:19.937Z","updated_at":"2022-11-08T21:03:19.937Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T10:00:42.474Z","updated_at":"2026-08-02T10:00:42.474Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T06:13:16.053Z","updated_at":"2024-01-27T06:13:16.053Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:20:07.049Z","updated_at":"2024-06-26T18:20:07.049Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695518,"name":"expo-audio","ecosystem":"npm","description":"A cross-platform audio library for React Native and Expo apps.","homepage":"https://docs.expo.dev/versions/latest/sdk/audio/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["android","audio","expo","expo-audio","ios","react-native"],"namespace":null,"versions_count":214,"first_release_published_at":"2022-01-07T10:53:18.298Z","latest_release_published_at":"2026-08-20T10:49:56.781Z","latest_release_number":"57.0.4","last_synced_at":"2026-09-02T02:46:17.315Z","created_at":"2022-04-09T15:17:15.627Z","updated_at":"2026-09-02T02:46:17.315Z","registry_url":"https://www.npmjs.com/package/expo-audio","install_command":"npm install expo-audio","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-51":"0.1.0","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.12-canary-20260701-9100865","sdk-56":"56.0.13","canary":"58.0.0-canary-20260901-2164f24","next":"57.0.4","latest":"57.0.4","sdk-55":"55.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-29T04:38:50.751Z","dependent_packages_count":1,"downloads":7624738,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":21.67699623792852,"dependent_repos_count":10.34547353362831,"dependent_packages_count":20.988444650457918,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":17.67030480733825},"purl":"pkg:npm/expo-audio","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-audio","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-audio","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-audio/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-28T11:00:27.046Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":679,"past_year_pull_requests_count":1955,"past_year_avg_time_to_close_issue":1415919.6871794872,"past_year_avg_time_to_close_pull_request":725105.6645101664,"past_year_issues_closed_count":390,"past_year_pull_requests_closed_count":1082,"past_year_pull_request_authors_count":385,"past_year_issue_authors_count":550,"past_year_avg_comments_per_issue":2.6244477172312224,"past_year_avg_comments_per_pull_request":2.20460358056266,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":843,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":117,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":93,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-audio/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-audio/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-audio/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-audio/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-audio/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-audio/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T16:00:34.887Z","updated_at":"2026-04-02T16:00:34.887Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-12T07:20:39.594Z","updated_at":"2022-11-12T07:20:39.594Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2024-03-14T18:09:32.972Z","updated_at":"2024-03-14T18:09:32.972Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2024-03-14T18:09:33.025Z","updated_at":"2024-03-14T18:09:33.025Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2024-03-14T18:09:33.324Z","updated_at":"2024-03-14T18:09:33.324Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2024-03-14T18:09:33.361Z","updated_at":"2024-03-14T18:09:33.361Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2024-03-14T18:09:33.408Z","updated_at":"2024-03-14T18:09:33.408Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2024-03-14T18:09:33.495Z","updated_at":"2024-03-14T18:09:33.495Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2024-03-14T18:09:33.719Z","updated_at":"2024-03-14T18:09:33.719Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T13:58:47.908Z","updated_at":"2026-08-06T13:58:47.908Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-03-14T18:09:32.350Z","updated_at":"2024-03-14T18:09:32.350Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:00.655Z","updated_at":"2024-06-26T18:19:00.655Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695836,"name":"expo-sqlite","ecosystem":"npm","description":"Provides access to a database using SQLite (https://www.sqlite.org/). The database is persisted across restarts of your app.","homepage":"https://docs.expo.dev/versions/latest/sdk/sqlite/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["async-storage","expo","react-native","sql","sqlite","storage"],"namespace":null,"versions_count":291,"first_release_published_at":"2023-11-23T16:18:26.780Z","latest_release_published_at":"2026-08-26T19:56:48.653Z","latest_release_number":"57.0.2","last_synced_at":"2026-09-02T02:47:22.071Z","created_at":"2022-04-09T15:17:32.467Z","updated_at":"2026-09-02T02:47:22.071Z","registry_url":"https://www.npmjs.com/package/expo-sqlite","install_command":"npm install expo-sqlite","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"13.3.0","sdk-51":"14.0.3","canary-sdk-55":"55.0.11-canary-20260429-a5e59cf","canary-sdk-56":"56.0.5-canary-20260701-9100865","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.20","latest":"57.0.2","next":"57.0.2","sdk-56":"56.0.6"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-26T15:35:59.546Z","dependent_packages_count":60,"downloads":4118850,"downloads_period":"last-month","dependent_repos_count":82537,"rankings":{"downloads":0.8262476356426056,"dependent_repos_count":0.11432841973288543,"dependent_packages_count":0.5777379893416219,"stargazers_count":0.6032246992015069,"forks_count":0.5482251361139239,"docker_downloads_count":0.9062918026665784,"average":0.5960092804498537},"purl":"pkg:npm/expo-sqlite","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-sqlite","docker_dependents_count":3,"docker_downloads_count":17059,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-sqlite","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-sqlite/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-25T16:14:27.710Z","issues_count":7150,"pull_requests_count":16680,"avg_time_to_close_issue":4993141.988060218,"avg_time_to_close_pull_request":1690468.2896444902,"issues_closed_count":5777,"pull_requests_closed_count":13558,"pull_request_authors_count":1473,"issue_authors_count":4926,"avg_comments_per_issue":4.502797202797203,"avg_comments_per_pull_request":1.6036570743405276,"merged_pull_requests_count":11821,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":672,"past_year_pull_requests_count":1938,"past_year_avg_time_to_close_issue":1326238.955613577,"past_year_avg_time_to_close_pull_request":712212.9384328359,"past_year_issues_closed_count":383,"past_year_pull_requests_closed_count":1072,"past_year_pull_request_authors_count":378,"past_year_issue_authors_count":547,"past_year_avg_comments_per_issue":2.5580357142857144,"past_year_avg_comments_per_pull_request":2.1393188854489162,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1665,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1097,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":305,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":176,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":115,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":95,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sqlite/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sqlite/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sqlite/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sqlite/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sqlite/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sqlite/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-03T01:01:26.009Z","updated_at":"2026-04-03T01:01:26.009Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T08:01:30.430Z","updated_at":"2026-02-26T08:01:30.430Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T12:00:48.946Z","updated_at":"2022-11-10T12:00:48.946Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T12:00:49.030Z","updated_at":"2022-11-10T12:00:49.030Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T12:00:49.067Z","updated_at":"2022-11-10T12:00:49.067Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T12:00:49.083Z","updated_at":"2022-11-10T12:00:49.083Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T12:00:49.102Z","updated_at":"2022-11-10T12:00:49.102Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T12:00:49.111Z","updated_at":"2022-11-10T12:00:49.111Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T12:00:49.171Z","updated_at":"2022-11-10T12:00:49.171Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T10:15:54.382Z","updated_at":"2026-08-01T10:15:54.382Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-28T06:13:17.264Z","updated_at":"2024-01-28T06:13:17.264Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:16:38.339Z","updated_at":"2024-06-26T18:16:38.339Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695901,"name":"expo-test-runner","ecosystem":"npm","description":"Script that enchants test experience.","homepage":"https://github.com/expo/expo-test-runner#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":[],"namespace":null,"versions_count":201,"first_release_published_at":"2023-11-23T16:19:02.981Z","latest_release_published_at":"2026-06-25T19:29:48.795Z","latest_release_number":"0.5.0","last_synced_at":"2026-09-02T00:44:21.614Z","created_at":"2022-04-09T15:17:35.866Z","updated_at":"2026-09-02T02:50:40.895Z","registry_url":"https://www.npmjs.com/package/expo-test-runner","install_command":"npm install expo-test-runner","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"alpha":"0.0.7","sdk-50":"0.0.18","sdk-51":"0.0.20","canary-sdk-55":"0.3.13-canary-20260429-a5e59cf","latest":"0.5.0","next":"0.5.0","canary-sdk-56":"0.4.1-canary-20260701-9100865","canary":"0.5.1-canary-20260901-2164f24"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T02:50:40.895Z","dependent_packages_count":2,"downloads":2051,"downloads_period":"last-month","dependent_repos_count":4,"rankings":{"downloads":6.2928139558992555,"dependent_repos_count":5.575993958199643,"dependent_packages_count":8.848579626231032,"stargazers_count":16.726633258447677,"forks_count":15.40493323788128,"docker_downloads_count":null,"average":10.569790807331778},"purl":"pkg:npm/expo-test-runner","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-test-runner","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-test-runner","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-test-runner/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-test-runner/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-test-runner/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-test-runner/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-test-runner/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-test-runner/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-test-runner/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-29T17:11:39.524Z","updated_at":"2026-04-29T17:11:39.524Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2023-02-06T16:58:01.751Z","updated_at":"2023-02-06T16:58:01.751Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2023-02-06T16:58:01.820Z","updated_at":"2023-02-06T16:58:01.820Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2023-02-06T16:58:02.033Z","updated_at":"2023-02-06T16:58:02.033Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2023-02-06T16:58:02.085Z","updated_at":"2023-02-06T16:58:02.085Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2023-02-06T16:58:02.099Z","updated_at":"2023-02-06T16:58:02.099Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2023-02-06T16:58:02.120Z","updated_at":"2023-02-06T16:58:02.120Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2023-02-06T16:58:02.165Z","updated_at":"2023-02-06T16:58:02.165Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2023-02-06T16:58:02.231Z","updated_at":"2023-02-06T16:58:02.231Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T13:44:20.176Z","updated_at":"2026-08-06T13:44:20.176Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-09-04T09:50:14.120Z","updated_at":"2024-09-04T09:50:14.120Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-09-04T09:50:14.052Z","updated_at":"2024-09-04T09:50:14.052Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695840,"name":"expo-status-bar","ecosystem":"npm","description":"Provides the same interface as the React Native StatusBar API, but with slightly different defaults to work great in Expo environments.","homepage":"https://docs.expo.dev/versions/latest/sdk/status-bar/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","expo-status-bar","react-native"],"namespace":null,"versions_count":221,"first_release_published_at":"2023-11-23T16:18:35.131Z","latest_release_published_at":"2026-07-15T10:03:18.392Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T00:24:29.908Z","created_at":"2022-04-09T15:17:32.776Z","updated_at":"2026-09-02T02:59:14.251Z","registry_url":"https://www.npmjs.com/package/expo-status-bar","install_command":"npm install expo-status-bar","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"1.11.1","sdk-51":"1.12.1","canary-sdk-55":"55.0.5-canary-20260429-a5e59cf","canary-sdk-56":"56.0.5-canary-20260701-9100865","latest":"57.0.1","next":"57.0.1","canary":"58.0.0-canary-20260901-2164f24"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T02:59:14.251Z","dependent_packages_count":806,"downloads":26477629,"downloads_period":"last-month","dependent_repos_count":80863,"rankings":{"downloads":0.2749021018646334,"dependent_repos_count":0.11600081375849533,"dependent_packages_count":0.0984091007724712,"stargazers_count":0.6065640444884531,"forks_count":0.5511682727081759,"docker_downloads_count":0.8897124465468351,"average":0.422792796689844},"purl":"pkg:npm/expo-status-bar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-status-bar","docker_dependents_count":16,"docker_downloads_count":150820,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-status-bar","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-status-bar/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-status-bar/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-status-bar/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-status-bar/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-status-bar/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-status-bar/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-status-bar/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T06:01:39.080Z","updated_at":"2026-04-02T06:01:39.080Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-26T10:31:51.472Z","updated_at":"2026-02-26T10:31:51.472Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T11:24:12.869Z","updated_at":"2022-11-10T11:24:12.869Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T11:24:12.886Z","updated_at":"2022-11-10T11:24:12.886Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T11:24:12.898Z","updated_at":"2022-11-10T11:24:12.898Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T11:24:12.905Z","updated_at":"2022-11-10T11:24:12.905Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T11:24:12.909Z","updated_at":"2022-11-10T11:24:12.909Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T11:24:12.913Z","updated_at":"2022-11-10T11:24:12.913Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T11:24:12.926Z","updated_at":"2022-11-10T11:24:12.926Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T18:00:55.198Z","updated_at":"2026-08-01T18:00:55.198Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-10-29T16:25:43.029Z","updated_at":"2024-10-29T16:25:43.029Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-10-29T16:25:42.956Z","updated_at":"2024-10-29T16:25:42.956Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695700,"name":"expo-local-authentication","ecosystem":"npm","description":"Provides an API for FaceID and TouchID (iOS) or the Fingerprint API (Android) to authenticate the user with a face or fingerprint scan.","homepage":"https://docs.expo.dev/versions/latest/sdk/local-authentication/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["auth","authentication","expo","faceID","fingerprint","react-native","touchID"],"namespace":null,"versions_count":258,"first_release_published_at":"2023-11-23T16:16:10.014Z","latest_release_published_at":"2026-07-22T16:20:54.165Z","latest_release_number":"57.0.2","last_synced_at":"2026-09-02T00:30:44.659Z","created_at":"2022-04-09T15:17:25.973Z","updated_at":"2026-09-02T03:05:28.363Z","registry_url":"https://www.npmjs.com/package/expo-local-authentication","install_command":"npm install expo-local-authentication","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"13.8.0","sdk-51":"14.0.1","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.5-canary-20260701-9100865","next":"57.0.2","latest":"57.0.2","sdk-56":"56.0.5","canary":"58.0.0-canary-20260901-2164f24","sdk-54":"17.0.9","sdk-55":"55.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T03:05:28.362Z","dependent_packages_count":18,"downloads":4914446,"downloads_period":"last-month","dependent_repos_count":9697,"rankings":{"downloads":0.4806281021366228,"dependent_repos_count":0.2506638432321603,"dependent_packages_count":1.289460226277628,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":0.6286766828238689},"purl":"pkg:npm/expo-local-authentication","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-local-authentication","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-local-authentication","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-local-authentication/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-local-authentication/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-local-authentication/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-local-authentication/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-local-authentication/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-local-authentication/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-local-authentication/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T20:31:07.712Z","updated_at":"2026-04-02T20:31:07.712Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-08T21:03:17.362Z","updated_at":"2022-11-08T21:03:17.362Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-08T21:03:18.779Z","updated_at":"2022-11-08T21:03:18.779Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-08T21:03:19.149Z","updated_at":"2022-11-08T21:03:19.149Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-08T21:03:19.282Z","updated_at":"2022-11-08T21:03:19.282Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-08T21:03:19.348Z","updated_at":"2022-11-08T21:03:19.348Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2025-09-20T13:54:56.071Z","updated_at":"2025-09-20T13:54:56.071Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-08T21:03:19.398Z","updated_at":"2022-11-08T21:03:19.398Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-08T21:03:19.556Z","updated_at":"2022-11-08T21:03:19.556Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T11:30:13.200Z","updated_at":"2026-08-01T11:30:13.200Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-10-30T17:10:05.722Z","updated_at":"2024-10-30T17:10:05.722Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-10-30T17:10:05.680Z","updated_at":"2024-10-30T17:10:05.680Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695831,"name":"expo-sms","ecosystem":"npm","description":"Provides access to the system's UI/app for sending SMS messages.","homepage":"https://docs.expo.dev/versions/latest/sdk/sms/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","react-native","sms"],"namespace":null,"versions_count":259,"first_release_published_at":"2023-11-23T16:18:07.294Z","latest_release_published_at":"2026-07-15T10:04:45.843Z","latest_release_number":"57.0.1","last_synced_at":"2026-09-02T01:21:38.509Z","created_at":"2022-04-09T15:17:32.191Z","updated_at":"2026-09-02T01:21:38.509Z","registry_url":"https://www.npmjs.com/package/expo-sms","install_command":"npm install expo-sms","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"11.7.1","sdk-51":"12.0.1","canary-sdk-55":"55.0.9-canary-20260429-a5e59cf","canary-sdk-56":"56.0.4-canary-20260701-9100865","latest":"57.0.1","next":"57.0.1","canary":"58.0.0-canary-20260901-2164f24","sdk-55":"55.0.18"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T15:36:05.504Z","dependent_packages_count":8,"downloads":514878,"downloads_period":"last-month","dependent_repos_count":9657,"rankings":{"downloads":0.9901067751224047,"dependent_repos_count":0.25111200743952583,"dependent_packages_count":2.4792591758145988,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":0.9686218401698925},"purl":"pkg:npm/expo-sms","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-sms","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-sms","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-sms/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sms/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sms/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sms/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sms/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sms/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-sms/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T13:01:11.502Z","updated_at":"2026-04-02T13:01:11.502Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2022-11-12T07:20:56.358Z","updated_at":"2022-11-12T07:20:56.358Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T07:20:56.535Z","updated_at":"2022-11-12T07:20:56.535Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-12T07:20:56.700Z","updated_at":"2022-11-12T07:20:56.700Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-12T07:20:56.815Z","updated_at":"2022-11-12T07:20:56.815Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-12T07:20:56.925Z","updated_at":"2022-11-12T07:20:56.925Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-12T07:20:56.972Z","updated_at":"2022-11-12T07:20:56.972Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-12T07:20:57.001Z","updated_at":"2022-11-12T07:20:57.001Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-12T07:20:57.196Z","updated_at":"2022-11-12T07:20:57.196Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-02T09:13:09.025Z","updated_at":"2026-08-02T09:13:09.025Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T00:31:42.370Z","updated_at":"2024-01-27T00:31:42.370Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:19:46.380Z","updated_at":"2024-06-26T18:19:46.380Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1695624,"name":"expo-firebase-crashlytics","ecosystem":"npm","description":"Expo Unimodule for interfacing with Firebase Crashlytics","homepage":"https://docs.expo.io/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","flutter","expo","firebase","crash","fabric"],"namespace":null,"versions_count":10,"first_release_published_at":"2018-09-17T23:56:59.403Z","latest_release_published_at":"2019-01-04T10:41:10.905Z","latest_release_number":"2.0.0","last_synced_at":"2026-08-31T09:42:05.670Z","created_at":"2022-04-09T15:17:21.924Z","updated_at":"2026-08-31T09:42:05.670Z","registry_url":"https://www.npmjs.com/package/expo-firebase-crashlytics","install_command":"npm install expo-firebase-crashlytics","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"next":"2.0.0-rc.2","latest":"2.0.0"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T22:49:06.728Z","dependent_packages_count":1,"downloads":101,"downloads_period":"last-month","dependent_repos_count":7,"rankings":{"downloads":11.252088383500784,"dependent_repos_count":4.3187095320641395,"dependent_packages_count":20.907756255897063,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":7.520237082786984},"purl":"pkg:npm/expo-firebase-crashlytics","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-firebase-crashlytics","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-firebase-crashlytics","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-firebase-crashlytics/dependencies","status":"deprecated","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-22T18:06:09.698Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":660,"past_year_pull_requests_count":1900,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":638702.7996146436,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1038,"past_year_pull_request_authors_count":367,"past_year_issue_authors_count":539,"past_year_avg_comments_per_issue":2.5106060606060607,"past_year_avg_comments_per_pull_request":2.071578947368421,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":813,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-crashlytics/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-crashlytics/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-crashlytics/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-crashlytics/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-crashlytics/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-firebase-crashlytics/codemeta","maintainers":[{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-12T07:20:44.114Z","updated_at":"2022-11-12T07:20:44.114Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"evanbacon","login":"evanbacon","name":null,"email":"baconbrix@gmail.com","url":null,"packages_count":294,"html_url":"https://www.npmjs.com/~evanbacon","role":null,"created_at":"2022-11-12T07:20:44.218Z","updated_at":"2022-11-12T07:20:44.218Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/evanbacon/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":5673858,"name":"@expo/fingerprint","ecosystem":"npm","description":"A library to generate a fingerprint from a React Native project","homepage":"https://github.com/expo/expo/tree/main/packages/@expo/fingerprint#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo","react-native","fingerprint","hash","node"],"namespace":"expo","versions_count":248,"first_release_published_at":"2023-11-22T12:56:10.625Z","latest_release_published_at":"2026-09-01T16:18:55.603Z","latest_release_number":"0.20.12","last_synced_at":"2026-09-01T16:22:02.313Z","created_at":"2022-12-11T00:18:59.309Z","updated_at":"2026-09-02T03:41:42.078Z","registry_url":"https://www.npmjs.com/package/@expo/fingerprint","install_command":"npm install @expo/fingerprint","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"0.6.0","sdk-51":"0.8.0","sdk-54":"0.15.5","canary-sdk-55":"0.17.0-canary-20260429-a5e59cf","canary-sdk-56":"1.0.0-canary-20260701-9100865","sdk-55":"0.16.8","canary":"1.0.0-canary-20260812-27f94d4","sdk-56":"0.19.10","latest":"0.20.11","next":"0.20.12"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":457,"last_synced_at":"2026-09-01T03:59:29.810Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101861,"followers":4709,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-09-01T03:59:29.848Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-09-02T03:41:42.078Z","dependent_packages_count":1,"downloads":33305812,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":2.6219067053717704,"dependent_repos_count":37.35893029916463,"dependent_packages_count":21.30988168970035,"stargazers_count":0.603759504619969,"forks_count":0.5494001643716063,"docker_downloads_count":null,"average":12.488775672645666},"purl":"pkg:npm/%40expo/fingerprint","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@expo/fingerprint","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@expo/fingerprint","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@expo/fingerprint/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T18:00:37.564Z","issues_count":19369,"pull_requests_count":35262,"avg_time_to_close_issue":7141443.310395545,"avg_time_to_close_pull_request":1788958.6467657185,"issues_closed_count":19037,"pull_requests_closed_count":33114,"pull_request_authors_count":3224,"issue_authors_count":11245,"avg_comments_per_issue":5.103980587536785,"avg_comments_per_pull_request":1.5571436674040042,"merged_pull_requests_count":28561,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2337,"past_year_pull_requests_count":7990,"past_year_avg_time_to_close_issue":1615800.6352941177,"past_year_avg_time_to_close_pull_request":758610.8105119454,"past_year_issues_closed_count":2125,"past_year_pull_requests_closed_count":7325,"past_year_pull_request_authors_count":1008,"past_year_issue_authors_count":1657,"past_year_avg_comments_per_issue":2.892597347026102,"past_year_avg_comments_per_pull_request":2.1543178973717145,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":165,"past_year_merged_pull_requests_count":6123,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":874,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":596,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":260,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":136,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Ffingerprint/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Ffingerprint/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Ffingerprint/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Ffingerprint/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Ffingerprint/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@expo%2Ffingerprint/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T16:01:35.865Z","updated_at":"2026-04-02T16:01:35.865Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-25T15:00:30.419Z","updated_at":"2026-02-25T15:00:30.419Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-12-11T00:24:56.518Z","updated_at":"2022-12-11T00:24:56.518Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-12-11T00:24:56.522Z","updated_at":"2022-12-11T00:24:56.522Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-12-11T00:24:56.532Z","updated_at":"2022-12-11T00:24:56.532Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-12-11T00:24:56.545Z","updated_at":"2022-12-11T00:24:56.545Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-12-11T00:24:56.548Z","updated_at":"2022-12-11T00:24:56.548Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-12-11T00:24:56.554Z","updated_at":"2022-12-11T00:24:56.554Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-12-11T00:24:56.564Z","updated_at":"2022-12-11T00:24:56.564Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-06T14:02:17.320Z","updated_at":"2026-08-06T14:02:17.320Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-01-27T06:13:07.340Z","updated_at":"2024-01-27T06:13:07.340Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-06-26T18:17:31.049Z","updated_at":"2024-06-26T18:17:31.049Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1683538,"name":"eslint-config-universe","ecosystem":"npm","description":"Shared ESLint configs for internal Expo projects.","homepage":"https://github.com/expo/expo/tree/main/packages/eslint-config-universe","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["eslint-config","expo","react-native"],"namespace":null,"versions_count":198,"first_release_published_at":"2023-11-23T16:12:37.494Z","latest_release_published_at":"2026-06-25T19:35:35.314Z","latest_release_number":"16.0.0","last_synced_at":"2026-09-02T03:54:13.261Z","created_at":"2022-04-09T14:54:55.661Z","updated_at":"2026-09-02T03:54:13.262Z","registry_url":"https://www.npmjs.com/package/eslint-config-universe","install_command":"npm install eslint-config-universe","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"sdk-50":"12.0.0","sdk-51":"12.1.0","sdk-52":"14.0.0","canary-sdk-55":"15.0.4-canary-20260429-a5e59cf","latest":"16.0.0","next":"16.0.0","canary-sdk-56":"15.2.1-canary-20260701-9100865","canary":"16.0.1-canary-20260812-27f94d4"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-27T20:31:28.638Z","dependent_packages_count":283,"downloads":1070864,"downloads_period":"last-month","dependent_repos_count":1132,"rankings":{"downloads":0.49281256652437455,"dependent_repos_count":0.5639866447066205,"dependent_packages_count":0.18180294835737057,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":1.6964743383257097,"average":0.6762846233978347},"purl":"pkg:npm/eslint-config-universe","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/eslint-config-universe","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/npm/eslint-config-universe","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/eslint-config-universe/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T16:00:21.215Z","issues_count":7166,"pull_requests_count":16745,"avg_time_to_close_issue":4989600.085462707,"avg_time_to_close_pull_request":1688801.5690644307,"issues_closed_count":5790,"pull_requests_closed_count":13596,"pull_request_authors_count":1489,"issue_authors_count":4937,"avg_comments_per_issue":4.5060005581914595,"avg_comments_per_pull_request":1.6103314422215587,"merged_pull_requests_count":11847,"bot_issues_count":1,"bot_pull_requests_count":218,"past_year_issues_count":680,"past_year_pull_requests_count":1966,"past_year_avg_time_to_close_issue":1412298.4398976981,"past_year_avg_time_to_close_pull_request":727550.3805147059,"past_year_issues_closed_count":391,"past_year_pull_requests_closed_count":1088,"past_year_pull_request_authors_count":387,"past_year_issue_authors_count":551,"past_year_avg_comments_per_issue":2.6220588235294118,"past_year_avg_comments_per_pull_request":2.198880976602238,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":38,"past_year_merged_pull_requests_count":847,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1676,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":447,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":306,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":238,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":160,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}],"active_maintainers":[{"login":"amandeepmittal","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":119,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"expo-bot","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"hassankhan","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"jakub-agent","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-config-universe/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-config-universe/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-config-universe/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-config-universe/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-config-universe/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/eslint-config-universe/codemeta","maintainers":[{"uuid":"philpl","login":"philpl","name":null,"email":"phil@kitten.sh","url":null,"packages_count":509,"html_url":"https://www.npmjs.com/~philpl","role":null,"created_at":"2026-04-02T11:04:59.931Z","updated_at":"2026-04-02T11:04:59.931Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/philpl/packages"},{"uuid":"tsapeta","login":"tsapeta","name":null,"email":"npm@tsapeta.com","url":null,"packages_count":521,"html_url":"https://www.npmjs.com/~tsapeta","role":null,"created_at":"2026-02-27T00:31:14.457Z","updated_at":"2026-02-27T00:31:14.457Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tsapeta/packages"},{"uuid":"ide","login":"ide","name":null,"email":"ide+npm@jameside.com","url":null,"packages_count":526,"html_url":"https://www.npmjs.com/~ide","role":null,"created_at":"2022-11-10T11:54:23.147Z","updated_at":"2022-11-10T11:54:23.147Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ide/packages"},{"uuid":"brentvatne","login":"brentvatne","name":null,"email":"brentvatne@gmail.com","url":null,"packages_count":2637,"html_url":"https://www.npmjs.com/~brentvatne","role":null,"created_at":"2022-11-10T11:54:23.165Z","updated_at":"2022-11-10T11:54:23.165Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/brentvatne/packages"},{"uuid":"expoadmin","login":"expoadmin","name":null,"email":"support@expo.io","url":null,"packages_count":445,"html_url":"https://www.npmjs.com/~expoadmin","role":null,"created_at":"2022-11-10T11:54:23.176Z","updated_at":"2022-11-10T11:54:23.176Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expoadmin/packages"},{"uuid":"exponent","login":"exponent","name":null,"email":"exponent.team@gmail.com","url":null,"packages_count":480,"html_url":"https://www.npmjs.com/~exponent","role":null,"created_at":"2022-11-10T11:54:23.184Z","updated_at":"2022-11-10T11:54:23.184Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/exponent/packages"},{"uuid":"wschurman","login":"wschurman","name":null,"email":"wschurman@gmail.com","url":null,"packages_count":388,"html_url":"https://www.npmjs.com/~wschurman","role":null,"created_at":"2022-11-10T11:54:23.189Z","updated_at":"2022-11-10T11:54:23.189Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wschurman/packages"},{"uuid":"bycedric","login":"bycedric","name":null,"email":"me@bycedric.com","url":null,"packages_count":673,"html_url":"https://www.npmjs.com/~bycedric","role":null,"created_at":"2022-11-10T11:54:23.197Z","updated_at":"2022-11-10T11:54:23.197Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/bycedric/packages"},{"uuid":"kudochien","login":"kudochien","name":null,"email":"ckchien@gmail.com","url":null,"packages_count":426,"html_url":"https://www.npmjs.com/~kudochien","role":null,"created_at":"2022-11-10T11:54:23.237Z","updated_at":"2022-11-10T11:54:23.237Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kudochien/packages"},{"uuid":"ccheever","login":"ccheever","name":null,"email":"ccheever@gmail.com","url":null,"packages_count":2469,"html_url":"https://www.npmjs.com/~ccheever","role":null,"created_at":"2026-08-01T22:30:09.271Z","updated_at":"2026-08-01T22:30:09.271Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ccheever/packages"},{"uuid":"alanhughes","login":"alanhughes","name":null,"email":"hughesno1@gmail.com","url":null,"packages_count":389,"html_url":"https://www.npmjs.com/~alanhughes","role":null,"created_at":"2024-08-20T15:13:23.526Z","updated_at":"2024-08-20T15:13:23.526Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alanhughes/packages"},{"uuid":"expo-bot","login":"expo-bot","name":null,"email":"brent+expobotnpm@expo.io","url":null,"packages_count":387,"html_url":"https://www.npmjs.com/~expo-bot","role":null,"created_at":"2024-08-20T15:13:22.831Z","updated_at":"2024-08-20T15:13:22.831Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/expo-bot/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":1296101,"name":"@stevesouth/expo-auth-session","ecosystem":"npm","description":"Expo module for browser-based authentication","homepage":"https://docs.expo.dev/versions/latest/sdk/auth-session","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","expo-auth-session","auth","oauth","authentication","auth-session"],"namespace":"stevesouth","versions_count":1,"first_release_published_at":"2021-12-19T17:23:26.900Z","latest_release_published_at":"2021-12-19T17:23:26.900Z","latest_release_number":"3.5.1","last_synced_at":"2026-08-31T11:15:02.260Z","created_at":"2022-04-08T19:58:56.025Z","updated_at":"2026-08-31T11:15:02.260Z","registry_url":"https://www.npmjs.com/package/@stevesouth/expo-auth-session","install_command":"npm install @stevesouth/expo-auth-session","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"3.5.1"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-22T11:30:19.000Z","size":3755566,"stargazers_count":51745,"open_issues_count":746,"forks_count":13571,"subscribers_count":386,"default_branch":"main","last_synced_at":"2026-08-22T12:13:07.015Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-22T11:40:24.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36823484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-22T02:00:06.114Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-22T23:48:07.090Z","dependent_packages_count":1,"downloads":28,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":64.39689277449303,"dependent_repos_count":10.295976646711454,"dependent_packages_count":20.907756255897063,"stargazers_count":0.5959713079501798,"forks_count":0.5266599345227535,"docker_downloads_count":null,"average":19.344651383914897},"purl":"pkg:npm/%40stevesouth/expo-auth-session","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@stevesouth/expo-auth-session","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@stevesouth/expo-auth-session","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@stevesouth/expo-auth-session/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-22T18:06:09.698Z","issues_count":7126,"pull_requests_count":16618,"avg_time_to_close_issue":4994860.766892479,"avg_time_to_close_pull_request":1681602.1196979792,"issues_closed_count":5755,"pull_requests_closed_count":13509,"pull_request_authors_count":1456,"issue_authors_count":4912,"avg_comments_per_issue":4.504911591355599,"avg_comments_per_pull_request":1.5950174509567938,"merged_pull_requests_count":11788,"bot_issues_count":1,"bot_pull_requests_count":213,"past_year_issues_count":660,"past_year_pull_requests_count":1900,"past_year_avg_time_to_close_issue":1257015.9214092141,"past_year_avg_time_to_close_pull_request":638702.7996146436,"past_year_issues_closed_count":369,"past_year_pull_requests_closed_count":1038,"past_year_pull_request_authors_count":367,"past_year_issue_authors_count":539,"past_year_avg_comments_per_issue":2.5106060606060607,"past_year_avg_comments_per_pull_request":2.071578947368421,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":33,"past_year_merged_pull_requests_count":813,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":1654,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1090,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"Simek","count":752,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"byCedric","count":686,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"gabrieldonadel","count":549,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":496,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"tsapeta","count":449,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"behenate","count":340,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"kitten","count":304,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"brentvatne","count":237,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"jakex7","count":159,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"betomoedano","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"hirbod","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"hassankhan","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"szdziedzic","count":50,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"intergalacticspacehighway","count":47,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"quinlanj","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"ide","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"tchayen","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"kbrandwijk","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"entiendoNull","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"wkozyra95","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wkozyra95"},{"login":"eiiot","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"}],"active_maintainers":[{"login":"amandeepmittal","count":166,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":108,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"kitten","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"expo-bot","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"Wenszel","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"behenate","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"jakex7","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"brentvatne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"intergalacticspacehighway","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"ramonclaudio","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"entiendoNull","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"jonsamp","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"byCedric","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"betomoedano","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"ide","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"FiberJW","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"szdziedzic","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"rami-maalouf","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"sswrk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"tchayen","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"AHGIJMKLKKZNPJKQR","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@stevesouth%2Fexpo-auth-session/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@stevesouth%2Fexpo-auth-session/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@stevesouth%2Fexpo-auth-session/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@stevesouth%2Fexpo-auth-session/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@stevesouth%2Fexpo-auth-session/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@stevesouth%2Fexpo-auth-session/codemeta","maintainers":[{"uuid":"stevesouth","login":"stevesouth","name":null,"email":"southsystems@gmail.com","url":null,"packages_count":4,"html_url":"https://www.npmjs.com/~stevesouth","role":null,"created_at":"2022-11-11T00:54:24.191Z","updated_at":"2022-11-11T00:54:24.191Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/stevesouth/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":2265420,"name":"react-native-web-video-thumbnails","ecosystem":"npm","description":"Web shim for native API to create thumbnails from videos","homepage":"https://docs.expo.io/versions/latest/sdk/video-thumbnails/","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native-video-thumbnails","expo-video-thumbnails","code","native","react","react-native","react-native-web","expo","expo-web","official"],"namespace":null,"versions_count":1,"first_release_published_at":"2019-12-13T16:01:07.395Z","latest_release_published_at":"2019-12-13T16:01:07.395Z","latest_release_number":"0.0.0-alpha.1","last_synced_at":"2026-08-31T09:57:04.899Z","created_at":"2022-04-09T23:20:13.386Z","updated_at":"2026-08-31T09:57:04.899Z","registry_url":"https://www.npmjs.com/package/react-native-web-video-thumbnails","install_command":"npm install react-native-web-video-thumbnails","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"0.0.0-alpha.1"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T17:35:46.530Z","dependent_packages_count":2,"downloads":24,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":45.76322889354142,"dependent_repos_count":25.32799796580169,"dependent_packages_count":32.89382871786066,"stargazers_count":0.8567316692989366,"forks_count":0.7167746378395319,"average":21.111712376868446},"purl":"pkg:npm/react-native-web-video-thumbnails","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/react-native-web-video-thumbnails","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/react-native-web-video-thumbnails","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/react-native-web-video-thumbnails/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-video-thumbnails/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-video-thumbnails/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-video-thumbnails/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-video-thumbnails/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-video-thumbnails/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/react-native-web-video-thumbnails/codemeta","maintainers":[{"uuid":"evanbacon","login":"evanbacon","name":null,"email":"baconbrix@gmail.com","url":null,"packages_count":294,"html_url":"https://www.npmjs.com/~evanbacon","role":null,"created_at":"2022-11-14T03:40:22.646Z","updated_at":"2022-11-14T03:40:22.646Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/evanbacon/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":11548701,"name":"@fredrifouni/expo-video","ecosystem":"npm","description":"A cross-platform, performant video component for React Native and Expo with Web support","homepage":"https://docs.expo.dev/versions/latest/sdk/video/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["react-native","expo","video","player"],"namespace":"fredrifouni","versions_count":27,"first_release_published_at":"2025-04-16T15:46:42.312Z","latest_release_published_at":"2025-10-29T18:03:27.326Z","latest_release_number":"3.0.11","last_synced_at":"2026-08-31T09:28:18.792Z","created_at":"2025-04-16T19:30:16.308Z","updated_at":"2026-08-31T09:28:18.792Z","registry_url":"https://www.npmjs.com/package/@fredrifouni/expo-video","install_command":"npm install @fredrifouni/expo-video","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"3.0.11","canary":"3.0.11-canary-20251110-08a2c3e"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T17:35:46.738Z","dependent_packages_count":0,"downloads":122,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":24.841871803667903,"dependent_packages_count":35.86064386942137,"stargazers_count":17.10006806249113,"forks_count":12.386340601230147,"docker_downloads_count":null,"average":22.547231084202636},"purl":"pkg:npm/%40fredrifouni/expo-video","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@fredrifouni/expo-video","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@fredrifouni/expo-video","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@fredrifouni/expo-video/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@fredrifouni%2Fexpo-video/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@fredrifouni%2Fexpo-video/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@fredrifouni%2Fexpo-video/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@fredrifouni%2Fexpo-video/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@fredrifouni%2Fexpo-video/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@fredrifouni%2Fexpo-video/codemeta","maintainers":[{"uuid":"fredrifouni","login":"fredrifouni","name":null,"email":"fredrik.forsell@nbcuni.com","url":null,"packages_count":3,"html_url":"https://www.npmjs.com/~fredrifouni","role":null,"created_at":"2025-04-16T19:30:17.521Z","updated_at":"2025-04-16T19:30:17.521Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/fredrifouni/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":11275698,"name":"expo-jey","ecosystem":"npm","description":"The Expo SDK","homepage":"https://github.com/expo/expo/tree/main/packages/expo","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/expo/expo","keywords_array":["expo"],"namespace":null,"versions_count":5,"first_release_published_at":"2025-01-17T21:02:38.376Z","latest_release_published_at":"2025-01-17T23:43:33.786Z","latest_release_number":"52.0.15","last_synced_at":"2026-08-31T11:19:53.578Z","created_at":"2025-01-17T21:08:41.836Z","updated_at":"2026-08-31T11:19:53.578Z","registry_url":"https://www.npmjs.com/package/expo-jey","install_command":"npm install expo-jey","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"52.0.15"},"contentPolicy":null},"repo_metadata":{"id":37307419,"uuid":"65750241","full_name":"expo/expo","owner":"expo","description":"An open-source framework for making universal native apps with React. Expo runs on Android, iOS, and the web.","archived":false,"fork":false,"pushed_at":"2026-08-29T11:11:02.000Z","size":3767612,"stargazers_count":51895,"open_issues_count":753,"forks_count":13686,"subscribers_count":390,"default_branch":"main","last_synced_at":"2026-08-29T13:59:29.198Z","etag":null,"topics":["android","app-framework","expo","framework","frontend","ios","javascript","mobile","native","native-apps","react","react-native","typescript","universal","web","web-framework"],"latest_commit_sha":null,"homepage":"https://docs.expo.dev","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","claude":"docs/CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2016-08-15T17:14:25.000Z","updated_at":"2026-08-29T13:26:05.000Z","dependencies_parsed_at":"2026-08-22T12:21:40.805Z","dependency_job_id":null,"html_url":"https://github.com/expo/expo","commit_stats":{"total_commits":24483,"total_committers":1548,"mean_commits":"15.815891472868216","dds":0.8867377363885145,"last_synced_commit":"5aaedd5bfa32c3e06ceb8854c92325822ba137bb"},"previous_names":["exponentjs/exponent"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/expo/expo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","download_url":"https://codeload.github.com/expo/expo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/sbom","scorecard":{"id":388325,"data":{"date":"2025-08-11","repo":{"name":"github.com/expo/expo","commit":"f44224c117ec5528d3eb0cfe8b32966f850ae39c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Code-Review","score":8,"reason":"Found 24/29 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: no status checks found to merge onto branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codemention.yaml:10","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pr-labeler.yml:37","Warn: no topLevel permission defined: .github/workflows/android-instrumentation-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/android-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/bare-diffs.yml:1","Warn: no topLevel permission defined: .github/workflows/check-issues-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/cli.yml:1","Warn: no topLevel permission defined: .github/workflows/client-android-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/client-ios-eas.yml:1","Warn: no topLevel permission defined: .github/workflows/code-review.yml:1","Warn: no topLevel permission defined: .github/workflows/codemention.yaml:1","Warn: no topLevel permission defined: .github/workflows/commentator.yml:1","Warn: no topLevel permission defined: .github/workflows/create-expo-app.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client-latest-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/development-client.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr-destroy.yml:1","Warn: no topLevel permission defined: .github/workflows/docs-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/expotools.yml:1","Warn: no topLevel permission defined: .github/workflows/fingerprint.yml:1","Warn: no topLevel permission defined: .github/workflows/home.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-static-frameworks.yml:1","Warn: no topLevel permission defined: .github/workflows/ios-unit-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-closed.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-stale.yml:1","Warn: no topLevel permission defined: .github/workflows/issue-triage.yml:1","Warn: no topLevel permission defined: .github/workflows/native-component-list.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-labeler.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-canaries.yml:1","Warn: no topLevel permission defined: .github/workflows/router-e2e.yml:1","Warn: no topLevel permission defined: .github/workflows/sdk.yml:1","Warn: no topLevel permission defined: .github/workflows/sync-template.yml:1","Warn: no topLevel permission defined: .github/workflows/test-react-native-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-lint.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite-nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/test-suite.yml:1","Warn: no topLevel permission defined: .github/workflows/validate-npm-owners.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: apps/bare-expo/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/app/src/main/assets/kernel.android.bundle:1","Warn: binary detected: apps/expo-go/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/android/versioned-react-native/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: apps/expo-go/ios/Exponent/Supporting/kernel.ios.bundle:1","Warn: binary detected: apps/paper-tester/android/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: fastlane/metadata/primary_category.txt:1","Warn: binary detected: fastlane/metadata/secondary_category.txt:1","Warn: binary detected: packages/expo-sqlite/android/libsql/arm64-v8a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/armeabi-v7a/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/libsql/x86_64/libsql_experimental.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/arm64-v8a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/armeabi-v7a/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86/vec.so:1","Warn: binary detected: packages/expo-sqlite/android/vec/x86_64/vec.so:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64-simulator/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/ios/libsql.xcframework/ios-arm64/libsql.framework/libsql:1","Warn: binary detected: packages/expo-sqlite/web/wa-sqlite/wa-sqlite.wasm:1","Warn: binary detected: templates/expo-template-bare-minimum/android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: / must be followed by an expression: docs/deploy.sh:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-instrumentation-tests.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-instrumentation-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-unit-tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/android-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bare-diffs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/bare-diffs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-issues-nightly.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/check-issues-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cli.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cli.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-android-eas.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-android-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/client-ios-eas.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/client-ios-eas.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-review.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/code-review.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/codemention.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/codemention.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commentator.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/commentator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-expo-app.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/create-expo-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-e2e.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/development-client-latest-e2e.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client-latest-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/development-client.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/development-client.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-pr.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs-pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/expotools.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/expotools.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fingerprint.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/fingerprint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/home.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/home.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/home.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-static-frameworks.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-static-frameworks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ios-unit-tests.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/ios-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-closed.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-opened.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/issue-triage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/lock.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-component-list.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/native-component-list.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-labeler.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/pr-labeler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-canaries.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/publish-canaries.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/router-e2e.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/router-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sdk.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sdk.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sdk.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-template.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-template.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/sync-template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-react-native-nightly.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-react-native-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-macos.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite-nightly.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-suite.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-suite.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/test-suite.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-npm-owners.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/expo/expo/validate-npm-owners.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/bare-expo/scripts/start-simulator.sh:20","Warn: npmCommand not pinned by hash: scripts/download-dependencies.sh:14","Warn: npmCommand not pinned by hash: .github/workflows/client-android-eas.yml:49","Warn: npmCommand not pinned by hash: .github/workflows/client-ios-eas.yml:59","Warn: downloadThenRun not pinned by hash: .github/workflows/router-e2e.yml:49","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:97","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite-nightly.yml:207","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:115","Warn: downloadThenRun not pinned by hash: .github/workflows/test-suite.yml:233","Info:   0 out of 132 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  49 third-party GitHubAction dependencies pinned","Info:   0 out of   6 downloadThenRun dependencies pinned","Info:   0 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"41 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx","Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6","Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx","Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2","Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96","Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj","Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg","Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2","Warn: Project is vulnerable to: GHSA-3wf4-68gx-mph8","Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97","Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T17:12:47.224Z","repository_id":37307419,"created_at":"2025-08-18T17:12:47.224Z","updated_at":"2025-08-18T17:12:47.224Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36972206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"expo","name":"Expo","uuid":"12504344","kind":"organization","description":"Expo is a free and open-source platform for making universal native apps with React that run on Android, iOS, and the web.","email":"support@expo.dev","website":"https://expo.dev","location":"United States of America","twitter":"expo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/12504344?v=4","repositories_count":456,"last_synced_at":"2026-08-21T22:30:09.371Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/expo","funding_links":[],"total_stars":101492,"followers":4682,"following":0,"created_at":"2022-11-02T16:30:00.841Z","updated_at":"2026-08-21T22:30:09.412Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expo/repositories"},"tags":[{"name":"Exponent-2.33.13","sha":"54522703fbd4377ab6594ae861a9f727b5edee61","kind":"commit","published_at":"2025-08-05T10:32:30.000Z","download_url":"https://codeload.github.com/expo/expo/tar.gz/Exponent-2.33.13","html_url":"https://github.com/expo/expo/releases/tag/Exponent-2.33.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/expo/expo@Exponent-2.33.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/tags/Exponent-2.33.13/manifests"}]},"repo_metadata_updated_at":"2026-08-30T17:35:46.868Z","dependent_packages_count":0,"downloads":14,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":25.195673242073084,"dependent_packages_count":36.44776625915409,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":30.82171975061359},"purl":"pkg:npm/expo-jey","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expo-jey","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/expo-jey","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expo-jey/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-30T00:04:10.546Z","issues_count":19367,"pull_requests_count":35258,"avg_time_to_close_issue":7142193.65216706,"avg_time_to_close_pull_request":1789010.041917072,"issues_closed_count":19035,"pull_requests_closed_count":33113,"pull_request_authors_count":3221,"issue_authors_count":11243,"avg_comments_per_issue":5.104301130789487,"avg_comments_per_pull_request":1.5571785126779738,"merged_pull_requests_count":28560,"bot_issues_count":3,"bot_pull_requests_count":562,"past_year_issues_count":2348,"past_year_pull_requests_count":8027,"past_year_avg_time_to_close_issue":1628058.2093676815,"past_year_avg_time_to_close_pull_request":759303.7591409542,"past_year_issues_closed_count":2135,"past_year_pull_requests_closed_count":7357,"past_year_pull_request_authors_count":1010,"past_year_issue_authors_count":1666,"past_year_avg_comments_per_issue":2.89778534923339,"past_year_avg_comments_per_pull_request":2.1504920891989534,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":167,"past_year_merged_pull_requests_count":6141,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/expo%2Fexpo/issues","maintainers":[{"login":"amandeepmittal","count":2820,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"alanjhughes","count":1598,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"byCedric","count":1163,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"kitten","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"gabrieldonadel","count":892,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"wschurman","count":873,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"brentvatne","count":840,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"behenate","count":515,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"Simek","count":375,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Simek"},{"login":"ide","count":359,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"jakex7","count":317,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"jonsamp","count":231,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"hassankhan","count":226,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"tsapeta","count":214,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tsapeta"},{"login":"Wenszel","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"hirbod","count":138,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"quinlanj","count":103,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"FiberJW","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"expo-bot","count":86,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"betomoedano","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"entiendoNull","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":39,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"szdziedzic","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/szdziedzic"},{"login":"tchayen","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"randomhajile","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/randomhajile"},{"login":"eiiot","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"},{"login":"leandrohstein","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"kbrandwijk","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kbrandwijk"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"ddaskal","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ddaskal"},{"login":"arttturslv","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arttturslv"},{"login":"wutsi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wutsi"},{"login":"olliephillips","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/olliephillips"},{"login":"vvcb","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vvcb"},{"login":"castrogusttavo","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/castrogusttavo"},{"login":"chang2694","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chang2694"},{"login":"AyubsWrld","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AyubsWrld"},{"login":"xperimental","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xperimental"},{"login":"dieghernan","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dieghernan"},{"login":"moriT958","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/moriT958"},{"login":"jewnix","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jewnix"}],"active_maintainers":[{"login":"amandeepmittal","count":880,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amandeepmittal"},{"login":"kitten","count":601,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kitten"},{"login":"alanjhughes","count":463,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alanjhughes"},{"login":"gabrieldonadel","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrieldonadel"},{"login":"hassankhan","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hassankhan"},{"login":"Wenszel","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Wenszel"},{"login":"jakex7","count":156,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakex7"},{"login":"behenate","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/behenate"},{"login":"brentvatne","count":83,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentvatne"},{"login":"expo-bot","count":82,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/expo-bot"},{"login":"ramonclaudio","count":61,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ramonclaudio"},{"login":"hirbod","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hirbod"},{"login":"sswrk","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sswrk"},{"login":"jakub-agent","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jakub-agent"},{"login":"jonsamp","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonsamp"},{"login":"entiendoNull","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/entiendoNull"},{"login":"intergalacticspacehighway","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/intergalacticspacehighway"},{"login":"byCedric","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byCedric"},{"login":"ide","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ide"},{"login":"wschurman","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wschurman"},{"login":"quinlanj","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/quinlanj"},{"login":"tchayen","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tchayen"},{"login":"FiberJW","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/FiberJW"},{"login":"betomoedano","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/betomoedano"},{"login":"rami-maalouf","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rami-maalouf"},{"login":"AHGIJMKLKKZNPJKQR","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AHGIJMKLKKZNPJKQR"},{"login":"eiiot","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eiiot"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-jey/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-jey/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-jey/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-jey/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-jey/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expo-jey/codemeta","maintainers":[{"uuid":"jrjs","login":"jrjs","name":null,"email":"jafar.rezaei.ard@gmail.com","url":null,"packages_count":154,"html_url":"https://www.npmjs.com/~jrjs","role":null,"created_at":"2025-01-17T21:15:26.609Z","updated_at":"2025-01-17T21:15:26.609Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/jrjs/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5816483,"maintainers_count":1245022,"namespaces_count":426640,"keywords_count":889778,"github":"npm","metadata":{"funded_packages_count":192526,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-02T05:02:10.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}}]