← candidates

npm supabase @2.105.0

Signals fired

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "kiwicopple",
    "etienne_supa"
  ],
  "versions": 1480
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-UB2aFLYAVujTQsZ9l+aCbDfLNaZApZucByRNP/1j0L1pXXzFhSgEyZSrvHSUO5LIvOb09AGHWishL/usVTuHTg==",
    "tarball": "https://registry.npmjs.org/supabase/-/supabase-2.105.0.tgz",
    "unpackedSize": 10769
  },
  "dist-tags": {
    "beta": "2.106.0-beta.9",
    "hotfix": "1.142.2",
    "latest": "2.105.0"
  },
  "latest_version": "2.105.0",
  "maintainers": [
    {
      "email": "pcopplestone@gmail.com",
      "name": "kiwicopple"
    },
    {
      "email": "etienne@supabase.io",
      "name": "etienne_supa"
    }
  ],
  "num_versions": 1480,
  "repository": {
    "directory": "apps/cli",
    "type": "git",
    "url": "https://github.com/supabase/cli.git"
  },
  "scripts": {
    "build": "pnpm build:next && pnpm build:legacy && pnpm build:shim",
    "build:legacy": "bun build src/legacy/main.ts --compile --outfile dist/supabase-legacy",
    "build:next": "bun build src/next/main.ts --compile --outfile dist/supabase-next",
    "build:shim": "bun build src/shared/cli/bin.ts --outfile dist/supabase.js --target node",
    "check:all": "nx run-many -t types:check lint:check fmt:check knip:check --projects=$npm_package_name",
    "dev:legacy": "pnpm exec bun src/legacy/main.ts",
    "dev:next": "pnpm exec bun src/next/main.ts",
    "fix:all": "nx run-many -t lint:fix fmt:fix knip:fix --projects=$npm_package_name",
    "test": "nx run-many -t test:core test:e2e --projects=$npm_package_name",
    "test:core": "nx run-many -t test:unit test:integration --projects=$npm_package_name --coverage.enabled",
    "test:smoke": "bun run tests/smoke-test.ts"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=2.105.0 but max published is 2.106.0-beta.1",
    "osv_advisory_active": "deps.dev advisories: ['MAL-2026-5187']",
    "shared_repo_different_publisher": "repo 'https://github.com/supabase/cli.git' also claimed by 8 package(s) under different publishers: ['npm/@supabase/cli-darwin-arm64', 'npm/@supabase/cli-darwin-x64', 'npm/@supabase/cli-windows-arm64'] ..."
  },
  "time": {
    "created": "2020-11-19T07:18:33.269Z",
    "modified": "2026-06-08T11:19:39.357Z"
  }
}