npm @coinbase/cds-common @9.1.3
score
0.75
high
flagged
2026-06-08 10:45
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+ssh://git@github.com/coinbase/cds.git' also claimed by 1 package(s) under different publishers: ['npm/@coinbase/cds-icons'] |
| dependency_added_unknown | 0.6 | 13 new non-watchlisted dep(s): ['@coinbase/cds-icons', '@coinbase/cds-illustrations', '@coinbase/cds-mcp-server', '@coinbase/cds-utils', '@modelcontextprotocol/sdk'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"coinbase-owner",
"coinbase-npm"
],
"versions": 151
}
Evidence (package doc at flag time)
{
"dependencies_count": 14,
"dist": {
"integrity": "sha512-fqE/juIcBZscUjS+3vaalvN+wpYvrVDo+SWRLxDGzcm7hhNTByXF0PK7OmnEnufzLVv5YzLjWQy68FOmqPVk1A==",
"tarball": "https://registry.npmjs.org/@coinbase/cds-common/-/cds-common-9.1.3.tgz",
"unpackedSize": 1218661
},
"dist-tags": {
"latest": "9.1.3",
"placeholder": "0.0.0",
"rc": "9.0.0-rc.3",
"v8-lts": "8.75.3"
},
"latest_version": "9.1.3",
"maintainers": [
{
"email": "opensource@coinbase.com",
"name": "coinbase-owner"
},
{
"email": "coinbase-npm@coinbase.com",
"name": "coinbase-npm"
}
],
"num_versions": 160,
"repository": {
"directory": "packages/common",
"type": "git",
"url": "git+ssh://git@github.com/coinbase/cds.git"
},
"scripts": null,
"signal_details": {
"dependency_added_unknown": "13 new non-watchlisted dep(s): ['@coinbase/cds-icons', '@coinbase/cds-illustrations', '@coinbase/cds-mcp-server', '@coinbase/cds-utils', '@modelcontextprotocol/sdk'] ...",
"shared_repo_different_publisher": "repo 'git+ssh://git@github.com/coinbase/cds.git' also claimed by 1 package(s) under different publishers: ['npm/@coinbase/cds-icons']"
},
"time": {
"created": "2025-09-30T17:18:07.818Z",
"modified": "2026-05-28T17:16:10.741Z"
}
}