npm @inditextech/weave-store-azure-web-pubsub @4.1.1
score
0.7
high
flagged
2026-06-10 03:51
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=4.1.1 but max published is 5.0.0-SNAPSHOT.336.1 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/InditexTech/weavejs.git' also claimed by 9 package(s) under different publishers: ['npm/create-weave-backend-app', 'npm/create-weave-frontend-app', 'npm/@inditextech/weave-react'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"jorgegar",
"amagan",
"marianoao",
"ivanasabi",
"danielfn",
"inditex-oso",
"jesusmpc"
],
"versions": 313
}
Evidence (package doc at flag time)
{
"dependencies_count": 9,
"dist": {
"integrity": "sha512-3n0jRWpHYDQIG2BqTAjrw/FVcU7GMB8BDqeZCwEK+BXwzY9rGvUqNgxZpE1dTrtHZnU0rxj5RlUhxE4Q8G0g3A==",
"tarball": "https://registry.npmjs.org/@inditextech/weave-store-azure-web-pubsub/-/weave-store-azure-web-pubsub-4.1.1.tgz",
"unpackedSize": 1280918
},
"dist-tags": {
"latest": "4.1.1",
"next": "5.0.0-SNAPSHOT.366.1",
"v3-latest": "3.10.1"
},
"latest_version": "4.1.1",
"maintainers": [
{
"email": "jorgegar@inditex.com",
"name": "jorgegar"
},
{
"email": "andreamr@ext.zara.com",
"name": "amagan"
},
{
"email": "marianoao@inditex.com",
"name": "marianoao"
},
{
"email": "ivanasabi@ext.inditex.com",
"name": "ivanasabi"
},
{
"email": "danielfn@inditex.com",
"name": "danielfn"
},
{
"email": "oso@inditex.com",
"name": "inditex-oso"
},
{
"email": "jesusmpc@inditex.com",
"name": "jesusmpc"
}
],
"num_versions": 314,
"repository": {
"url": "git+https://github.com/InditexTech/weavejs.git"
},
"scripts": {
"build": "tsc --noEmit && tsdown",
"build:snapshot": "tsc --noEmit && tsdown --sourcemap",
"bump:snapshot": "npm version $npm_package_version.$(date \"+%s\")",
"check": "echo \"Monorepo test script\" && exit 0",
"dev": "tsdown --watch",
"dev:server:express": "tsx --env-file=.env ./dev-server/express-server.ts",
"dev:server:koa": "tsx --env-file=.env ./dev-server/koa-server.ts",
"dist:tag": "npm dist-tag add \"$(jq -r .name package.json)@$(jq -r .version package.json)\" \"$PR_TAG\" --registry=\"$NPM_PUBLISHING_REGISTRY\" --verbose",
"format": "prettier --write ./src ./dev-server",
"link": "npm link",
"lint": "eslint ./src",
"lint:fix": "npm run lint -- --fix",
"pack": "npm pack",
"publish:snapshot": "npm publish --tag next --access public",
"release:perform": "npm publish --access public",
"release:prepare": "npm run verify",
"test": "vitest --passWithNoTests --coverage --watch=false",
"types:check": "tsc --noEmit",
"unpublish": "npm unpublish --force",
"verify": "npm run lint && npm run test && npm run build",
"version:development": "npm version $(npm version minor)-SNAPSHOT",
"version:release": "npm version $RELEASE_VERSION -m \"[npm-scripts] prepare release $RELEASE_VERSION\" --tag-version-prefix \"\""
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=4.1.1 but max published is 5.0.0-SNAPSHOT.336.1",
"shared_repo_different_publisher": "repo 'git+https://github.com/InditexTech/weavejs.git' also claimed by 9 package(s) under different publishers: ['npm/create-weave-backend-app', 'npm/create-weave-frontend-app', 'npm/@inditextech/weave-react'] ..."
},
"time": {
"created": "2025-04-25T11:19:43.422Z",
"modified": "2026-06-10T08:51:43.340Z"
}
}