npm vite-config-react @1.3.1

score

0.5019 med

flagged 2026-06-15 07:05

signals by category

identity 2 topology 2 enrichment 2

maintainers added: blockcsherpa

Signals fired

signal	weight	rationale
identity
maintainer_churn	1.0	added: ['blockcsherpa']
maintainer_takeover	1.0	prior all gone ['nathan333'] -> now ['blockcsherpa']
topology
no_repo	0.3	package.json has no repository field
typosquat	1.0	combosquat of 'react'
enrichment
osv_advisory_active	0.5	deps.dev advisories: ['MAL-2026-5728']
depsdev_no_source_repo	0.5	deps.dev has no SOURCE_REPO link for this version

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "nathan333"
  ],
  "versions": 14
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-Sy3nR070BFXXj2wm0QjV3lsALhP2ZWKWAU5qakxstWihAGhtdrC+FFLN1WJzehtadNyXTUU0l1Z7Srv2+AV8KA==",
    "tarball": "https://registry.npmjs.org/vite-config-react/-/vite-config-react-1.3.1.tgz",
    "unpackedSize": 7435
  },
  "dist-tags": {
    "latest": "1.3.1"
  },
  "latest_version": "1.3.1",
  "maintainers": [
    {
      "email": "kristinedeboeck@outlook.com",
      "name": "blockcsherpa"
    }
  ],
  "num_versions": 14,
  "repository": null,
  "scripts": null,
  "signal_details": {
    "depsdev_no_source_repo": "deps.dev has no SOURCE_REPO link for this version",
    "maintainer_churn": "added: ['blockcsherpa']",
    "maintainer_takeover": "prior all gone ['nathan333'] -> now ['blockcsherpa']",
    "no_repo": "package.json has no repository field",
    "osv_advisory_active": "deps.dev advisories: ['MAL-2026-5728']",
    "typosquat": "combosquat of 'react'"
  },
  "time": {
    "created": "2026-04-18T20:49:40.474Z",
    "modified": "2026-06-15T12:05:22.525Z"
  }
}