BEACON

← candidates

npm @salesforce/retail-react-app @10.0.1

score
0.5333 med
flagged 2026-06-09 04:08
signals by category
topology 3

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
no_repo 0.3 package.json has no repository field
dist_tag_anomaly 0.5 dist-tags.latest=10.0.1 but max published is 10.1.0-nightly-20260511090256
mass_publish_burst 0.8 publisher 'mobify' pushed 7 packages in the last 15min on npm

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "ire-npm-team-user",
    "jimjag",
    "salesforce-releases",
    "jasonschroeder-sfdc",
    "mobify",
    "lwc-admin",
    "salesforce-admin"
  ],
  "versions": 783
}

Evidence (package doc at flag time)

{
  "dependencies_count": 51,
  "dist": {
    "integrity": "sha512-+J60sl2CInAOvHwwn7A2tS78lOiwJEyAs03TH6MBxGgh00EX2CGNB2cKfXrQP9IuyJk3rWi9T1X+7rGguZprgQ==",
    "tarball": "https://registry.npmjs.org/@salesforce/retail-react-app/-/retail-react-app-10.0.1.tgz",
    "unpackedSize": 10004316
  },
  "dist-tags": {
    "latest": "10.0.1",
    "next": "10.0.0-preview.2",
    "nightly-next": "10.1.0-nightly-20260609090308"
  },
  "latest_version": "10.0.1",
  "maintainers": [
    {
      "email": "industriesEngineeringDevOps@salesforce.com",
      "name": "ire-npm-team-user"
    },
    {
      "email": "jimjag@gmail.com",
      "name": "jimjag"
    },
    {
      "email": "alm-cli@salesforce.com",
      "name": "salesforce-releases"
    },
    {
      "email": "jschroeder@salesforce.com",
      "name": "jasonschroeder-sfdc"
    },
    {
      "email": "dev@mobify.com",
      "name": "mobify"
    },
    {
      "email": "admin@lwcjs.org",
      "name": "lwc-admin"
    },
    {
      "email": "osscore@salesforce.com",
      "name": "salesforce-admin"
    }
  ],
  "num_versions": 785,
  "repository": null,
  "scripts": {
    "analyze-build": "cross-env MOBIFY_ANALYZE=true npm run build",
    "build": "npm run build-translations && pwa-kit-dev build",
    "build-translations": "npm run extract-default-translations && npm run compile-translations && npm run compile-translations:pseudo",
    "compile-translations": "node ./scripts/translations/compile-folder.js translations",
    "compile-translations:pseudo": "node ./scripts/translations/compile-pseudo.js translations/en-US.json",
    "extract-default-translations": "node ./scripts/translations/extract-default-messages.js en-US en-GB",
    "format": "pwa-kit-dev format \"**/*.{js,jsx}\"",
    "lint": "pwa-kit-dev lint \"**/*.{js,jsx}\"",
    "lint:fix": "npm run lint -- --fix",
    "postinstall": "npm run compile-translations && npm run compile-translations:pseudo",
    "push": "npm run build && pwa-kit-dev push",
    "save-credentials": "pwa-kit-dev save-credentials",
    "start": "cross-env NODE_ICU_DATA=node_modules/full-icu pwa-kit-dev start",
    "start:inspect": "npm run start -- --inspect",
    "start:pseudolocale": "npm run extract-default-translations && npm run compile-translations:pseudo && cross-env USE_PSEUDOLOCALE=true npm run start",
    "tail-logs": "pwa-kit-dev tail-logs",
    "test": "pwa-kit-dev test",
    "test:lighthouse": "cross-env NODE_ENV=production lhci autorun --config=tests/lighthouserc.js",
    "test:max-file-size": "npm run build && bundlesize"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=10.0.1 but max published is 10.1.0-nightly-20260511090256",
    "mass_publish_burst": "publisher 'mobify' pushed 7 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field"
  },
  "time": {
    "created": "2023-05-31T23:45:19.384Z",
    "modified": "2026-06-09T09:08:22.587Z"
  }
}