npm @expo/cli @56.1.15
score
0.7
high
flagged
2026-06-10 19:00
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=56.1.15 but max published is 57.0.0-canary-20260526-13e89ca |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/expo/expo.git' also claimed by 8 package(s) under different publishers: ['npm/@snapbox/pkg-automation', 'npm/@snapbox/pkg-automation-shizuku', 'npm/@snapbox/pkg-computer-vision'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"ide",
"brentvatne",
"expoadmin",
"exponent",
"bycedric",
"kudochien",
"alanhughes",
"tsapeta",
"expo-bot",
"philpl",
"wschurman"
],
"versions": 456
}
Evidence (package doc at flag time)
{
"dependencies_count": 57,
"dist": {
"integrity": "sha512-ik6++YzURB2d/mSEfYwbuNa19uOWZwVHy9THCQ/pPr6mzplKl4w9I4nlYF9lx7oluNC3NvxsSZ8/rgpVKEOJTA==",
"tarball": "https://registry.npmjs.org/@expo/cli/-/cli-56.1.15.tgz",
"unpackedSize": 4858131
},
"dist-tags": {
"canary": "57.0.0-canary-20260526-13e89ca",
"canary-sdk-55": "55.0.13-canary-20260429-a5e59cf",
"canary-sdk-56": "56.1.13-canary-20260606-4d4666c",
"latest": "56.1.15",
"next": "56.1.15",
"sdk-50": "0.17.7",
"sdk-52": "0.22.28",
"sdk-53": "0.24.24",
"sdk-54": "54.0.25",
"sdk-55": "55.0.32"
},
"latest_version": "56.1.15",
"maintainers": [
{
"email": "ide+npm@jameside.com",
"name": "ide"
},
{
"email": "brentvatne@gmail.com",
"name": "brentvatne"
},
{
"email": "support@expo.io",
"name": "expoadmin"
},
{
"email": "exponent.team@gmail.com",
"name": "exponent"
},
{
"email": "me@bycedric.com",
"name": "bycedric"
},
{
"email": "ckchien@gmail.com",
"name": "kudochien"
},
{
"email": "hughesno1@gmail.com",
"name": "alanhughes"
},
{
"email": "npm@tsapeta.com",
"name": "tsapeta"
},
{
"email": "brent+expobotnpm@expo.io",
"name": "expo-bot"
},
{
"email": "phil@kitten.sh",
"name": "philpl"
},
{
"email": "wschurman@gmail.com",
"name": "wschurman"
}
],
"num_versions": 457,
"repository": {
"directory": "packages/@expo/cli",
"type": "git",
"url": "git+https://github.com/expo/expo.git"
},
"scripts": {
"build": "taskr",
"clean": "expo-module clean",
"expo-module": "expo-module",
"lint": "expo-module lint",
"test": "expo-module test",
"test:e2e": "jest --config e2e/jest.config.js",
"test:playwright": "playwright test --config e2e/playwright.config.ts",
"typecheck": "expo-module typecheck"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=56.1.15 but max published is 57.0.0-canary-20260526-13e89ca",
"shared_repo_different_publisher": "repo 'git+https://github.com/expo/expo.git' also claimed by 8 package(s) under different publishers: ['npm/@snapbox/pkg-automation', 'npm/@snapbox/pkg-automation-shizuku', 'npm/@snapbox/pkg-computer-vision'] ..."
},
"time": {
"created": "2022-03-23T16:20:49.104Z",
"modified": "2026-06-11T00:00:45.867Z"
}
}