The recent supply chain attack on NPM packages does not affect Tokeo.
Our mobile app is built natively in Swift (for iOS) and Kotlin (for Android), so it does not rely on the affected JavaScript libraries.
That said, we’re also carefully reviewing our supporting “node” services and the small parts of our ecosystem that do use JavaScript, just as a precaution.
This is standard good practice whenever there’s a widely publicized security issue of this nature.
Looking ahead, we’re also exploring a few additional features to make it easier for our community to spot potential risks quickly in the future.
Security is always a top priority for us. Stay Safe, Tokers!