audit-ci.jsonc

{
  "$schema": "https://github.com/IBM/audit-ci/raw/main/docs/schema.json",
  "high": true,
  "skip-dev": true,
  "allowlist": [
    {
      "minimatch": {
        "active": true,
        "notes": "Transitive dep via Expo toolchain (@expo/config-plugins > glob > minimatch). No app code calls minimatch — only used by Expo internally with hardcoded patterns. ReDoS requires user-controlled glob patterns which never happens here."
      }
    }
  ]
}