npm @expo/metro-config @56.0.13
score
0.7
high
flagged
2026-06-02 01:16
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=56.0.13 but max published is 57.0.0-canary-20260526-13e89ca |
| mass_publish_burst | 0.8 | publisher 'alanhughes' pushed 12 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/expo/expo.git' also claimed by 8 package(s) under different publishers: ['npm/@snapbox/pkg-automation', 'npm/@snapbox/pkg-automation-shizuku', 'npm/@snapbox/pkg-computer-vision'] ... |
| dependency_added_unknown | 0.6 | 5 new non-watchlisted dep(s): ['@expo/require-utils', '@jridgewell/gen-mapping', '@jridgewell/remapping', '@jridgewell/sourcemap-codec', 'msgpackr'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"ide",
"brentvatne",
"evanbacon",
"expoadmin",
"exponent",
"bycedric",
"kudochien",
"alanhughes",
"tsapeta",
"expo-bot",
"philpl",
"wschurman"
],
"versions": 407
}
Evidence (package doc at flag time)
{
"dependencies_count": 24,
"dist": {
"integrity": "sha512-OPyNYiex/6Ms8zT2POdIZsLhcAZYk7O+yJvpz5uG/4QRA7aiESfCy1I+0YHewMlR4P1YQeyxIrfTurs6m9xfZA==",
"tarball": "https://registry.npmjs.org/@expo/metro-config/-/metro-config-56.0.13.tgz",
"unpackedSize": 774663
},
"dist-tags": {
"alpha": "0.1.57-alpha.0",
"canary": "57.0.0-canary-20260526-13e89ca",
"canary-sdk-55": "55.0.10-canary-20260429-a5e59cf",
"canary-sdk-56": "56.0.14-canary-20260526-6cd5e37",
"latest": "56.0.13",
"next": "56.0.13",
"sdk-50": "0.17.6",
"sdk-51": "0.18.4",
"sdk-53": "0.20.18",
"sdk-54": "54.0.16",
"sdk-55": "55.0.23"
},
"latest_version": "56.0.13",
"maintainers": [
{
"email": "ide+npm@jameside.com",
"name": "ide"
},
{
"email": "brentvatne@gmail.com",
"name": "brentvatne"
},
{
"email": "support@expo.io",
"name": "expoadmin"
},
{
"email": "exponent.team@gmail.com",
"name": "exponent"
},
{
"email": "me@bycedric.com",
"name": "bycedric"
},
{
"email": "ckchien@gmail.com",
"name": "kudochien"
},
{
"email": "hughesno1@gmail.com",
"name": "alanhughes"
},
{
"email": "npm@tsapeta.com",
"name": "tsapeta"
},
{
"email": "brent+expobotnpm@expo.io",
"name": "expo-bot"
},
{
"email": "phil@kitten.sh",
"name": "philpl"
},
{
"email": "wschurman@gmail.com",
"name": "wschurman"
}
],
"num_versions": 413,
"repository": {
"directory": "packages/@expo/metro-config",
"type": "git",
"url": "git+https://github.com/expo/expo.git"
},
"scripts": {
"build": "expo-module tsc",
"clean": "expo-module clean",
"lint": "expo-module lint",
"test": "expo-module test",
"typecheck": "expo-module typecheck",
"watch": "expo-module tsc --watch --preserveWatchOutput"
},
"signal_details": {
"dependency_added_unknown": "5 new non-watchlisted dep(s): ['@expo/require-utils', '@jridgewell/gen-mapping', '@jridgewell/remapping', '@jridgewell/sourcemap-codec', 'msgpackr']",
"dist_tag_anomaly": "dist-tags.latest=56.0.13 but max published is 57.0.0-canary-20260526-13e89ca",
"mass_publish_burst": "publisher 'alanhughes' pushed 12 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/expo/expo.git' also claimed by 8 package(s) under different publishers: ['npm/@snapbox/pkg-automation', 'npm/@snapbox/pkg-automation-shizuku', 'npm/@snapbox/pkg-computer-vision'] ..."
},
"time": {
"created": "2020-04-06T19:09:33.226Z",
"modified": "2026-06-01T20:19:24.438Z"
}
}