npm @dashevo/dapi-grpc @3.0.1
score
0.6667
med
flagged
2026-06-01 23:24
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=3.0.1 but max published is 3.1.0-dev.1 |
| mass_publish_burst | 0.8 | publisher 'GitHub Actions' pushed 97 packages in the last 15min on npm |
| enrichment | ||
| repo_archived | 0.7 | claimed repo dashevo/dapi-grpc is archived but package keeps publishing |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"shumkov",
"alex-werner",
"nmarley",
"cofresi",
"evodeploy",
"jawid-h"
],
"versions": 434
}
Evidence (package doc at flag time)
{
"dependencies_count": 6,
"dist": {
"integrity": "sha512-5i3bujWKnjdJWd+XBakv3ewM9F1MFWOX0Xmry76LiIMAM4clUxORTpr/NpZpaVVD/CppLovMy/BOHetv5VAZiQ==",
"tarball": "https://registry.npmjs.org/@dashevo/dapi-grpc/-/dapi-grpc-3.0.1.tgz",
"unpackedSize": 22169112
},
"dist-tags": {
"0.13-dev": "0.13.0-dev.4",
"0.14-dev": "0.14.0-dev.1",
"0.15-dev": "0.15.0-dev.4",
"0.16-dev": "0.16.0-dev.3",
"0.17-dev": "0.17.0-dev.1",
"0.18-dev": "0.18.0-dev.3",
"0.19-dev": "0.19.0-dev.1",
"0.20-dev": "0.20.0-dev.4",
"0.21-dev": "0.21.0-dev.12",
"0.22-dev": "0.22.0-dev.16",
"0.23-alpha": "0.23.0-alpha.9",
"0.23-dev": "0.23.0-dev.10",
"0.24-dev": "0.24.0-dev.34",
"0.25-dev": "0.25.0-dev.33",
"0.25-pr": "0.25.16-pr.1574.2",
"0.25-rc": "0.25.16-rc.6",
"1.0-beta": "1.0.0-beta.4",
"1.0-dev": "1.0.0-dev.16",
"1.0-pr": "1.0.0-pr.1937.B.3",
"1.0-rc": "1.0.0-rc.2",
"1.1-dev": "1.1.0-dev.1",
"1.1-pr": "1.1.0-pr.2012.6",
"1.1-pr.2012.3": "1.1.0-pr.2012.3",
"1.2-rc": "1.2.0-rc.1",
"1.3-dev": "1.3.0-dev.7",
"1.4-dev": "1.4.0-dev.8",
"1.5-rc": "1.5.0-rc.2",
"1.6-dev": "1.6.0-dev.2",
"1.6-pr": "1.6.0-pr.2287.1",
"1.8-dev": "1.8.0-dev.2",
"1.8-rc": "1.8.0-rc.2",
"2.0-dev": "2.0.0-dev.1",
"2.0-rc": "2.0.0-rc.18",
"2.1-dev": "2.1.0-dev.8",
"2.1-pr": "2.1.0-pr.2716.1",
"2.1-rc": "2.1.0-rc.1",
"2.2-dev": "2.2.0-dev.2",
"3.0-dev": "3.0.0-dev.11",
"3.0-hotfix": "3.0.1-hotfix.4",
"3.0-rc": "3.0.0-rc.3",
"3.1-dev": "3.1.0-dev.8",
"dev": "0.12.0-dev.10",
"latest": "3.0.1"
},
"latest_version": "3.0.1",
"maintainers": [
{
"email": "ivan@shumkov.ru",
"name": "shumkov"
},
{
"email": "obusco@gmail.com",
"name": "alex-werner"
},
{
"email": "nathan.marley@gmail.com",
"name": "nmarley"
},
{
"email": "cofresi@dash.org",
"name": "cofresi"
},
{
"email": "evodeploy@blackcarrot.be",
"name": "evodeploy"
},
{
"email": "djavidoff@gmail.com",
"name": "jawid-h"
}
],
"num_versions": 438,
"repository": {
"type": "git",
"url": "git+https://github.com/dashevo/dapi-grpc.git"
},
"scripts": {
"build": "yarn exec scripts/build.sh",
"lint": "eslint .",
"prepublishOnly": "yarn run build",
"test": "yarn run test:unit",
"test:unit": "mocha './test/unit/**/*.spec.js'"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=3.0.1 but max published is 3.1.0-dev.1",
"mass_publish_burst": "publisher 'GitHub Actions' pushed 97 packages in the last 15min on npm",
"repo_archived": "claimed repo dashevo/dapi-grpc is archived but package keeps publishing"
},
"time": {
"created": "2019-04-18T13:57:49.173Z",
"modified": "2026-05-28T21:30:26.835Z"
}
}