npm app-builder-lib @26.8.1

score

0.7 high

flagged 2026-06-02 00:57

signals by category

topology 4

maintainers added: —

Signals fired

signal	weight	rationale
topology
dist_tag_anomaly	0.5	dist-tags.latest=26.8.1 but max published is 26.13.1
mass_publish_burst	0.8	publisher 'GitHub Actions' pushed 2182 packages in the last 15min on npm
shared_repo_different_publisher	0.9	repo 'git+https://github.com/electron-userland/electron-builder.git' also claimed by 4 package(s) under different publishers: ['npm/electron-updater', 'npm/electron-publish', 'npm/builder-util'] ...
dependency_added_unknown	0.6	36 new non-watchlisted dep(s): ['@develar/schema-utils', '@electron/asar', '@electron/fuses', '@electron/get', '@electron/notarize'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "develar",
    "onegoldfishh"
  ],
  "versions": 287
}

Evidence (package doc at flag time)

{
  "dependencies_count": 36,
  "dist": {
    "integrity": "sha512-p0Im/Dx5C4tmz8QEE1Yn4MkuPC8PrnlRneMhWJj7BBXQfNTJUshM/bp3lusdEsDbvvfJZpXWnYesgSLvwtM2Zw==",
    "tarball": "https://registry.npmjs.org/app-builder-lib/-/app-builder-lib-26.8.1.tgz",
    "unpackedSize": 3629161
  },
  "dist-tags": {
    "latest": "26.8.1",
    "next": "26.13.1"
  },
  "latest_version": "26.8.1",
  "maintainers": [
    {
      "email": "develar@gmail.com",
      "name": "develar"
    },
    {
      "email": "crazym9@gmail.com",
      "name": "onegoldfishh"
    }
  ],
  "num_versions": 292,
  "repository": {
    "directory": "packages/app-builder-lib",
    "type": "git",
    "url": "git+https://github.com/electron-userland/electron-builder.git"
  },
  "scripts": null,
  "signal_details": {
    "dependency_added_unknown": "36 new non-watchlisted dep(s): ['@develar/schema-utils', '@electron/asar', '@electron/fuses', '@electron/get', '@electron/notarize'] ...",
    "dist_tag_anomaly": "dist-tags.latest=26.8.1 but max published is 26.13.1",
    "mass_publish_burst": "publisher 'GitHub Actions' pushed 2182 packages in the last 15min on npm",
    "shared_repo_different_publisher": "repo 'git+https://github.com/electron-userland/electron-builder.git' also claimed by 4 package(s) under different publishers: ['npm/electron-updater', 'npm/electron-publish', 'npm/builder-util'] ..."
  },
  "time": {
    "created": "2018-07-20T12:10:07.251Z",
    "modified": "2026-06-01T16:53:45.341Z"
  }
}