Currently expo-device (https://www.npmjs.com/package/expo-device?activeTab=code) use the dependency: "ua-parser-js": "^0.7.33"

The thing is this old version of ua-parser-js has a high-severity vulnerability:

ReDoS Vulnerability in ua-parser-js version - https://github.com/advisories/GHSA-fhg7-m89q-25r3

This prevents apps with expo-device dependency from passing FluidAttacks check required by Google.