npm · Snapshot 2026-10-26
expo release history
What happened to stable releases over the snapshot’s last 12 months.
- Releases in 12 months
- 133
- Pulled
- 0
- Fixed within 72 hours
- 14
- Share pulled or fixed
- 10.5%
- Normal release cadence
- 1.4 days
Pulled and fixed counts can overlap. Latest stable release: 58.0.19 · .
Recent pulled or quickly fixed versions
- 58.0.15
- 58.0.13
- 58.0.4
- 57.0.5
- 57.0.3
A practical setting
Give a new release three days.
In this snapshot, a 3-day cooldown would have waited past the replacement patch for 14 releases of expo fixed within 72 hours. This describes release timing; it does not establish why a patch was published or guarantee that an update will hold up.
Merge these settings into your existing configuration and adjust the manifest directory. Dependabot applies this to version updates; security updates are handled separately. The Dependabot example covers the ecosystem; the Renovate example targets this package.
Dependabot
version: 2
updates:
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "daily"
cooldown:
default-days: 3Renovate
{
"packageRules": [
{
"matchDatasources": [
"npm"
],
"matchPackageNames": [
"expo"
],
"minimumReleaseAge": "3 days"
}
]
}Dependabot cooldown reference · Renovate release age reference
These are outcomes, not predictions. A quick patch is a timing signal, not proof that a release was defective. This table does not detect compromised or malicious releases; for security, use a dedicated supply-chain scanner.
Methodology and column definitions →See this for your own code.
Rework Risk finds the merged pull requests in your repo that later needed corrective work, dependency bumps included.
Get a rework backtest on your repo