npm @ton/walletkit @0.0.11
score
0.5485
med
flagged
2026-06-09 08:36
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.0.11 but max published is 1.0.0-alpha.0 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/ton-connect/kit.git' also claimed by 3 package(s) under different publishers: ['npm/@ton/mcp', 'npm/@ton/appkit', 'npm/@ton/appkit-react'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"tsivarev",
"klpx",
"danil42russia",
"tolk-vm",
"ton-ci",
"it-tonstudio-io"
],
"versions": 18
}
Evidence (package doc at flag time)
{
"dependencies_count": 7,
"dist": {
"integrity": "sha512-jUv1iybcMLytbs1YpiNDFsm+RGn1f/BdnSkO2Yyr7a27UVlO590PotEaSa5tEGHyJmZTI9OYlyBAnLltH9zAhQ==",
"tarball": "https://registry.npmjs.org/@ton/walletkit/-/walletkit-0.0.11.tgz",
"unpackedSize": 2744129
},
"dist-tags": {
"alpha": "1.0.0-alpha.2",
"latest": "0.0.11"
},
"latest_version": "0.0.11",
"maintainers": [
{
"email": "tsivarev.a@gmail.com",
"name": "tsivarev"
},
{
"email": "alex@arigativa.ru",
"name": "klpx"
},
{
"email": "Danil42Worker@gmail.com",
"name": "danil42russia"
},
{
"email": "tolk.vm@gmail.com",
"name": "tolk-vm"
},
{
"email": "ilya@tonstudio.io",
"name": "ton-ci"
},
{
"email": "it@tonstudio.io",
"name": "it-tonstudio-io"
}
],
"num_versions": 18,
"repository": {
"type": "git",
"url": "git+https://github.com/ton-connect/kit.git"
},
"scripts": {
"build": "pnpm build:clean && pnpm build:cjs && pnpm build:esm",
"build:cjs": "tsc -p tsconfig.json",
"build:clean": "rimraf dist",
"build:esm": "tsc -p tsconfig.esm.json",
"clean": "git clean -xdf dist node_modules .turbo coverage",
"dev": "tsc -p tsconfig.esm.json --watch",
"generate-openapi-spec": "src/api/scripts/generate-openapi-spec.sh",
"lint": "eslint . --max-warnings 0",
"lint:fix": "eslint . --max-warnings 0 --fix",
"quality": "pnpm test:coverage",
"test": "vitest run",
"test:coverage": "vitest run --coverage",
"test:mutation": "stryker run stryker.config.js",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.0.11 but max published is 1.0.0-alpha.0",
"shared_repo_different_publisher": "repo 'git+https://github.com/ton-connect/kit.git' also claimed by 3 package(s) under different publishers: ['npm/@ton/mcp', 'npm/@ton/appkit', 'npm/@ton/appkit-react']"
},
"time": {
"created": "2025-11-14T04:32:08.600Z",
"modified": "2026-06-01T16:28:03.192Z"
}
}