npm @expo/config-plugins @56.0.8
score
0.7
high
flagged
2026-06-02 01:16
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=56.0.8 but max published is 57.0.0-canary-20260526-13e89ca |
| mass_publish_burst | 0.8 | publisher 'alanhughes' pushed 5 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/expo/expo.git' also claimed by 8 package(s) under different publishers: ['npm/@snapbox/pkg-automation', 'npm/@snapbox/pkg-automation-shizuku', 'npm/@snapbox/pkg-computer-vision'] ... |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['@expo/require-utils'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"ide",
"brentvatne",
"evanbacon",
"expoadmin",
"exponent",
"bycedric",
"kudochien",
"alanhughes",
"tsapeta",
"expo-bot",
"philpl",
"wschurman"
],
"versions": 317
}
Evidence (package doc at flag time)
{
"dependencies_count": 13,
"dist": {
"integrity": "sha512-phTuyBhgVLfqUHMjQkAfRtbyoY6yTxoKja1awtpVnEkoJDxPJuXx1KX5uvq1eZtt4bJQ08OBJ6P95INqRSHpRg==",
"tarball": "https://registry.npmjs.org/@expo/config-plugins/-/config-plugins-56.0.8.tgz",
"unpackedSize": 1168130
},
"dist-tags": {
"canary": "57.0.0-canary-20260526-13e89ca",
"canary-sdk-55": "55.0.7-canary-20260429-a5e59cf",
"canary-sdk-56": "56.0.9-canary-20260526-6cd5e37",
"latest": "56.0.8",
"next": "56.0.8",
"sdk-50": "7.8.4",
"sdk-51": "8.0.4",
"sdk-52": "9.0.17",
"sdk-55": "55.0.10"
},
"latest_version": "56.0.8",
"maintainers": [
{
"email": "ide+npm@jameside.com",
"name": "ide"
},
{
"email": "brentvatne@gmail.com",
"name": "brentvatne"
},
{
"email": "support@expo.io",
"name": "expoadmin"
},
{
"email": "exponent.team@gmail.com",
"name": "exponent"
},
{
"email": "me@bycedric.com",
"name": "bycedric"
},
{
"email": "ckchien@gmail.com",
"name": "kudochien"
},
{
"email": "hughesno1@gmail.com",
"name": "alanhughes"
},
{
"email": "npm@tsapeta.com",
"name": "tsapeta"
},
{
"email": "brent+expobotnpm@expo.io",
"name": "expo-bot"
},
{
"email": "phil@kitten.sh",
"name": "philpl"
},
{
"email": "wschurman@gmail.com",
"name": "wschurman"
}
],
"num_versions": 322,
"repository": {
"directory": "packages/@expo/config-plugins",
"type": "git",
"url": "git+https://github.com/expo/expo.git"
},
"scripts": {
"build": "tsc --emitDeclarationOnly && babel src --out-dir build --extensions \".ts\" --source-maps --ignore \"src/**/__mocks__/*\",\"src/**/__tests__/*\",\"src/**/__integration_tests__/*\"",
"clean": "expo-module clean",
"lint": "expo-module lint",
"test": "expo-module test",
"typecheck": "expo-module typecheck"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['@expo/require-utils']",
"dist_tag_anomaly": "dist-tags.latest=56.0.8 but max published is 57.0.0-canary-20260526-13e89ca",
"mass_publish_burst": "publisher 'alanhughes' pushed 5 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/expo/expo.git' also claimed by 8 package(s) under different publishers: ['npm/@snapbox/pkg-automation', 'npm/@snapbox/pkg-automation-shizuku', 'npm/@snapbox/pkg-computer-vision'] ..."
},
"time": {
"created": "2020-11-26T20:39:23.627Z",
"modified": "2026-06-01T20:19:01.324Z"
}
}