npm dmg-builder @26.8.1

score

0.7 high

flagged 2026-06-02 00:57

signals by category

topology 4

maintainers added: —

Signals fired

signal	weight	rationale
topology
dist_tag_anomaly	0.5	dist-tags.latest=26.8.1 but max published is 26.13.1
mass_publish_burst	0.8	publisher 'GitHub Actions' pushed 2182 packages in the last 15min on npm
shared_repo_different_publisher	0.9	repo 'git+https://github.com/electron-userland/electron-builder.git' also claimed by 4 package(s) under different publishers: ['npm/builder-util-runtime', 'npm/electron-updater', 'npm/electron-publish'] ...
dependency_added_unknown	0.6	5 new non-watchlisted dep(s): ['app-builder-lib', 'builder-util', 'fs-extra', 'iconv-lite', 'js-yaml']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "develar",
    "onegoldfishh"
  ],
  "versions": 310
}

Evidence (package doc at flag time)

{
  "dependencies_count": 5,
  "dist": {
    "integrity": "sha512-glMJgnTreo8CFINujtAhCgN96QAqApDMZ8Vl1r8f0QT8QprvC1UCltV4CcWj20YoIyLZx6IUskaJZ0NV8fokcg==",
    "tarball": "https://registry.npmjs.org/dmg-builder/-/dmg-builder-26.8.1.tgz",
    "unpackedSize": 144211
  },
  "dist-tags": {
    "latest": "26.8.1",
    "next": "26.13.1"
  },
  "latest_version": "26.8.1",
  "maintainers": [
    {
      "email": "develar@gmail.com",
      "name": "develar"
    },
    {
      "email": "crazym9@gmail.com",
      "name": "onegoldfishh"
    }
  ],
  "num_versions": 315,
  "repository": {
    "directory": "packages/dmg-builder",
    "type": "git",
    "url": "git+https://github.com/electron-userland/electron-builder.git"
  },
  "scripts": null,
  "signal_details": {
    "dependency_added_unknown": "5 new non-watchlisted dep(s): ['app-builder-lib', 'builder-util', 'fs-extra', 'iconv-lite', 'js-yaml']",
    "dist_tag_anomaly": "dist-tags.latest=26.8.1 but max published is 26.13.1",
    "mass_publish_burst": "publisher 'GitHub Actions' pushed 2182 packages in the last 15min on npm",
    "shared_repo_different_publisher": "repo 'git+https://github.com/electron-userland/electron-builder.git' also claimed by 4 package(s) under different publishers: ['npm/builder-util-runtime', 'npm/electron-updater', 'npm/electron-publish'] ..."
  },
  "time": {
    "created": "2017-08-25T07:26:17.271Z",
    "modified": "2026-06-01T16:53:49.269Z"
  }
}