npm dash @6.0.2
score
0.7
high
flagged
2026-06-12 00:55
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| typosquat | 1.0 | lev=1 to watched 'dasha' |
| dist_tag_anomaly | 0.5 | dist-tags.latest=6.0.2 but max published is 7.0.0-beta.1 |
| enrichment | ||
| repo_archived | 0.7 | claimed repo dashevo/js-dash-sdk is archived but package keeps publishing |
| commit_cadence_mismatch | 0.6 | repo last pushed 1619d ago but package version was published 7d ago |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"shumkov",
"alex-werner",
"antouhou",
"nmarley",
"evodeploy"
],
"versions": 434
}
Evidence (package doc at flag time)
{
"dependencies_count": 14,
"dist": {
"integrity": "sha512-8ztUO/CiyfizbRjCYOwF2RjhcPBMvnQvVukafiQdUSJt4YbDFtYXiCQXjd6m0e6goSY6VcqbOs5mDF/cVWBNSA==",
"tarball": "https://registry.npmjs.org/dash/-/dash-6.0.2.tgz",
"unpackedSize": 39451909
},
"dist-tags": {
"0.22-dev": "3.22.0-dev.16",
"0.23-alpha": "3.23.0-alpha.9",
"0.23-dev": "3.23.0-dev.10",
"0.24-dev": "3.24.0-dev.34",
"0.25-dev": "3.25.0-dev.33",
"0.25-pr": "3.25.16-pr.1574.2",
"0.25-rc": "3.25.16-rc.6",
"1.0-beta": "4.0.0-beta.4",
"1.0-dev": "4.0.0-dev.16",
"1.0-pr": "4.0.0-pr.1937.B.3",
"1.0-rc": "4.0.0-rc.2",
"1.1-dev": "4.1.0-dev.1",
"1.1-pr": "4.1.0-pr.2012.6",
"1.2-rc": "4.2.0-rc.1",
"1.3-dev": "4.3.0-dev.7",
"1.4-dev": "4.4.0-dev.8",
"1.5-rc": "4.5.0-rc.2",
"1.6-dev": "4.6.0-dev.2",
"1.6-pr": "4.6.0-pr.2287.1",
"1.8-dev": "4.8.0-dev.2",
"1.8-rc": "4.8.0-rc.2",
"2.0-dev": "5.0.0-dev.1",
"2.0-rc": "5.0.0-rc.18",
"2.1-dev": "5.1.0-dev.8",
"2.1-pr": "2.1.0-pr.2716.1",
"2.1-rc": "2.1.0-rc.1",
"2.2-dev": "5.2.0-dev.2",
"3.0-dev": "6.0.0-dev.11",
"3.0-hotfix": "6.0.1-hotfix.4",
"3.0-rc": "6.0.0-rc.3",
"3.1-dev": "6.1.0-dev.8",
"3.19-dev": "3.19.0-dev.2",
"3.20-dev": "3.20.0-dev.4",
"3.21-dev": "3.21.0-dev.15",
"3.22-dev": "3.22.0-dev.2",
"4.0-beta": "7.0.0-beta.4",
"4.0-rc": "7.0.0-rc.2",
"dev": "3.19.0-dev.1",
"latest": "6.0.2"
},
"latest_version": "6.0.2",
"maintainers": [
{
"email": "ivan@shumkov.ru",
"name": "shumkov"
},
{
"email": "obusco@gmail.com",
"name": "alex-werner"
},
{
"email": "antouhou@gmail.com",
"name": "antouhou"
},
{
"email": "nathan.marley@gmail.com",
"name": "nmarley"
},
{
"email": "evodeploy@blackcarrot.be",
"name": "evodeploy"
}
],
"num_versions": 436,
"repository": {
"type": "git",
"url": "git+https://github.com/dashevo/DashJS.git"
},
"scripts": {
"build": "yarn run build:ts && webpack --stats-error-details",
"build:ts": "tsc -p tsconfig.build.json",
"lint": "eslint .",
"lint:fix": "eslint . --fix",
"prepare": "yarn run build",
"prepublishOnly": "yarn run build",
"start:dev": "nodemon --exec 'yarn run build && yarn run test:unit'",
"start:ts": "tsc -p tsconfig.build.json --watch",
"test": "yarn run test:types && yarn run test:unit && yarn run test:browsers",
"test:browsers": "karma start ./karma/karma.conf.js --single-run",
"test:browsers:functional": "LOAD_ENV=true karma start ./karma/karma.functional.conf.js --single-run",
"test:functional": "yarn run build:ts && LOAD_ENV=true mocha --recursive tests/functional/**/*.js",
"test:types": "yarn pnpify tsd",
"test:unit": "tsc -p tsconfig.mocha.json && mocha build/**/*.spec.js"
},
"signal_details": {
"commit_cadence_mismatch": "repo last pushed 1619d ago but package version was published 7d ago",
"dist_tag_anomaly": "dist-tags.latest=6.0.2 but max published is 7.0.0-beta.1",
"repo_archived": "claimed repo dashevo/js-dash-sdk is archived but package keeps publishing",
"typosquat": "lev=1 to watched 'dasha'"
},
"time": {
"created": "2011-05-09T18:32:24.518Z",
"modified": "2026-06-12T05:55:41.525Z"
}
}