BEACON

← candidates

npm botframework-webchat-component @4.19.1

score
0.7 high
flagged 2026-06-10 14:27
signals by category
topology 3

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
typosquat 1.0 combosquat of 'botframework-webchat'
mass_publish_burst 0.8 publisher 'microsoft1es' pushed 12 packages in the last 15min on npm
dependency_added_unknown 0.6 1 new non-watchlisted dep(s): ['micromark']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "botframework",
    "sgellock",
    "cwhitten",
    "microsoft1es",
    "microsoft-oss-releases",
    "compulim",
    "oevgeny"
  ],
  "versions": 442
}

Evidence (package doc at flag time)

{
  "dependencies_count": 28,
  "dist": {
    "integrity": "sha512-u30JfhGd59MfDGVx1tlHGawspCJCEwYs8f6lRVYrlQoIGnTTSaP6t9zSbmufWJfUDIEY2dKoErCE/ZT73jRPVw==",
    "tarball": "https://registry.npmjs.org/botframework-webchat-component/-/botframework-webchat-component-4.19.1.tgz",
    "unpackedSize": 7019023
  },
  "dist-tags": {
    "hotfix": "4.18.1-hotfix.20260308.b15b405",
    "latest": "4.19.1",
    "main": "4.19.1",
    "master": "4.3.1-master.98c662f",
    "preview": "4.0.0-preview.1b38d7d"
  },
  "latest_version": "4.19.1",
  "maintainers": [
    {
      "email": "botframework@microsoft.com",
      "name": "botframework"
    },
    {
      "email": "sgellock@microsoft.com",
      "name": "sgellock"
    },
    {
      "email": "christopherwhitten@gmail.com",
      "name": "cwhitten"
    },
    {
      "email": "npmjs@microsoft.com",
      "name": "microsoft1es"
    },
    {
      "email": "microsoft-oss-publishing@microsoft.com",
      "name": "microsoft-oss-releases"
    },
    {
      "email": "compulim@hotmail.com",
      "name": "compulim"
    },
    {
      "email": "eolonov@gmail.com",
      "name": "oevgeny"
    }
  ],
  "num_versions": 443,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/microsoft/BotFramework-WebChat.git"
  },
  "scripts": {
    "build": "npm run --if-present build:pre && npm run build:run && npm run --if-present build:post",
    "build:post": "npm run build:post:dtsroll && npm run build:post:validate",
    "build:post:dtsroll": "dtsroll ./dist/*.d.* && sed -E -i 's/^([[:space:]]*export[[:space:]]+)type[[:space:]]+(\\{[[:space:]]+type[[:space:]]+)/\\1\\2/' ./dist/*.d.* && sed -i -E -e 's/\\{[[:space:]]*DropZoneState\\b/{ type DropZoneState/g' -e 's/\\btypeof[[:space:]]+DropZoneState\\b/DropZoneState/g' ./dist/*.d.*",
    "build:post:validate": "npm run build:post:validate:css && npm run build:post:validate:inject-css && npm run build:post:validate:dts",
    "build:post:validate:css": "vg ast-check lightning-css ./dist/*.css",
    "build:post:validate:dts": "vg ast-check dist-types ./dist/*.d.*",
    "build:post:validate:inject-css": "vg ast-check css-inject dist/*.js dist/*.mjs",
    "build:pre": "npm run build:pre:local-dependencies && npm run build:pre:watch",
    "build:pre:local-dependencies": "../../scripts/npm/build-local-dependencies.sh",
    "build:pre:watch": "../../scripts/npm/build-watch.sh",
    "build:run": "tsup",
    "bump": "vg bump prod && vg bump dev && (npm audit fix || exit 0)",
    "eslint": "npm run precommit",
    "postversion": "../../scripts/npm/postversion.sh",
    "precommit": "npm run precommit:eslint -- src && npm run precommit:typecheck",
    "precommit:eslint": "../../node_modules/.bin/eslint --report-unused-disable-directives --max-warnings 0",
    "precommit:typecheck": "tsc --project ./src --emitDeclarationOnly false --esModuleInterop true --noEmit --pretty false",
    "preversion": "../../scripts/npm/preversion.sh",
    "start": "../../scripts/npm/notify-build.sh \"src\" \"../component-better-link/package.json\" \"../react-hooks/package.json\" \"../react-valibot/package.json\" \"../styles/package.json\""
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['micromark']",
    "mass_publish_burst": "publisher 'microsoft1es' pushed 12 packages in the last 15min on npm",
    "typosquat": "combosquat of 'botframework-webchat'"
  },
  "time": {
    "created": "2018-09-22T07:18:17.046Z",
    "modified": "2026-06-10T19:27:01.772Z"
  }
}