npm @taskcluster/client-web @100.3.0
score
0.7219
high
flagged
2026-06-09 07:15
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/taskcluster/taskcluster.git#main' also claimed by 1 package(s) under different publishers: ['npm/@taskcluster/client'] |
| dependency_added_unknown | 0.6 | 4 new non-watchlisted dep(s): ['crypto-js', 'hawk', 'query-string', 'taskcluster-lib-urls'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"taskcluster-bot"
],
"versions": 74
}
Evidence (package doc at flag time)
{
"dependencies_count": 4,
"dist": {
"integrity": "sha512-HIe8Xnr9oNmnmnx9bYM6Hnt6cYJi8muklB2sMwrG2ciNyCUV4YfbIIyq8ZOxYWDKC2p+GFqDfsRIsMy791Kncw==",
"tarball": "https://registry.npmjs.org/@taskcluster/client-web/-/client-web-100.3.0.tgz",
"unpackedSize": 230317
},
"dist-tags": {
"latest": "100.3.0"
},
"latest_version": "100.3.0",
"maintainers": [
{
"email": "taskcluster-accounts@mozilla.com",
"name": "taskcluster-bot"
}
],
"num_versions": 76,
"repository": {
"type": "git",
"url": "git+https://github.com/taskcluster/taskcluster.git#main"
},
"scripts": {
"lint": "eslint src/*.js test/*.js",
"test": "NODE_OPTIONS='--openssl-legacy-provider --network-family-autoselection=false' karma start --single-run"
},
"signal_details": {
"dependency_added_unknown": "4 new non-watchlisted dep(s): ['crypto-js', 'hawk', 'query-string', 'taskcluster-lib-urls']",
"shared_repo_different_publisher": "repo 'git+https://github.com/taskcluster/taskcluster.git#main' also claimed by 1 package(s) under different publishers: ['npm/@taskcluster/client']"
},
"time": {
"created": "2025-07-22T21:38:02.415Z",
"modified": "2026-06-09T12:15:48.570Z"
}
}