BEACON

← candidates

npm @tldraw/state-react @5.0.1

score
0.7167 high
flagged 2026-05-21 11:38
signals by category
identity 1 content 1 topology 4

maintainers added: mimetldraw, mitjatldraw

package profile →

Signals fired

signalweightrationale
identity
maintainer_churn 1.0 added: ['mimetldraw', 'mitjatldraw']
content
script_count_spike 0.5 scripts count 0 -> 9
topology
dist_tag_anomaly 0.5 dist-tags.latest=5.0.1 but max published is 5.1.0-canary.4a807daabeda
mass_publish_burst 0.8 publisher 'tldraw-personal' pushed 12 packages in the last 15min on npm
shared_repo_different_publisher 0.9 repo 'https://github.com/tldraw/tldraw' also claimed by 4 package(s) under different publishers: ['npm/@tldraw/validate', 'npm/@tldraw/indices', 'npm/@tldraw/ai'] ...
dependency_added_unknown 0.6 2 new non-watchlisted dep(s): ['@tldraw/state', '@tldraw/utils']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "tldraw-personal",
    "steveruizok",
    "siobhantldraw"
  ],
  "versions": 2524
}

Evidence (package doc at flag time)

{
  "dependencies_count": 2,
  "dist": {
    "integrity": "sha512-DDF7dCSRXeHRcQdlNBp2cl0PEy2MMYxvKcsvpCgMMSu9m775RNQ/smMFq7QNtUht9aWGruQKByf4WGLXqTe4CA==",
    "tarball": "https://registry.npmjs.org/@tldraw/state-react/-/state-react-5.0.1.tgz",
    "unpackedSize": 153403
  },
  "dist-tags": {
    "canary": "5.1.0-canary.1d99b686825a",
    "internal": "4.6.0-internal.e29318c66fb0",
    "latest": "5.0.1",
    "next": "5.1.0-next.1c5accdb13b3",
    "revision": "4.5.12"
  },
  "latest_version": "5.0.1",
  "maintainers": [
    {
      "email": "steve@tldraw.com",
      "name": "tldraw-personal"
    },
    {
      "email": "steveruizok@gmail.com",
      "name": "steveruizok"
    },
    {
      "email": "mime@tldraw.com",
      "name": "mimetldraw"
    },
    {
      "email": "mitja@tldraw.com",
      "name": "mitjatldraw"
    },
    {
      "email": "accounts@tldraw.com",
      "name": "siobhantldraw"
    }
  ],
  "num_versions": 2525,
  "repository": {
    "type": "git",
    "url": "https://github.com/tldraw/tldraw"
  },
  "scripts": {
    "build": "yarn run -T tsx ../../internal/scripts/build-package.ts",
    "build-api": "yarn run -T tsx ../../internal/scripts/build-api.ts",
    "lint": "yarn run -T tsx ../../internal/scripts/lint.ts",
    "pack-tarball": "yarn pack",
    "postpack": "../../internal/scripts/postpack.sh",
    "prepack": "yarn run -T tsx ../../internal/scripts/prepack.ts",
    "test": "yarn run -T vitest --passWithNoTests",
    "test-ci": "yarn run -T vitest run --passWithNoTests",
    "test-coverage": "yarn run -T vitest run --coverage --passWithNoTests"
  },
  "signal_details": {
    "dependency_added_unknown": "2 new non-watchlisted dep(s): ['@tldraw/state', '@tldraw/utils']",
    "dist_tag_anomaly": "dist-tags.latest=5.0.1 but max published is 5.1.0-canary.4a807daabeda",
    "maintainer_churn": "added: ['mimetldraw', 'mitjatldraw']",
    "mass_publish_burst": "publisher 'tldraw-personal' pushed 12 packages in the last 15min on npm",
    "script_count_spike": "scripts count 0 -> 9",
    "shared_repo_different_publisher": "repo 'https://github.com/tldraw/tldraw' also claimed by 4 package(s) under different publishers: ['npm/@tldraw/validate', 'npm/@tldraw/indices', 'npm/@tldraw/ai'] ..."
  },
  "time": {
    "created": "2024-07-15T11:29:44.972Z",
    "modified": "2026-05-21T09:47:20.330Z"
  }
}