npm @clerk/clerk-js @6.13.0
score
0.7333
high
flagged
2026-06-02 07:04
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=6.13.0 but max published is 6.13.1-canary.v20260527223243 |
| mass_publish_burst | 0.8 | publisher 'GitHub Actions' pushed 534 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/clerk/javascript.git' also claimed by 10 package(s) under different publishers: ['npm/@clerk/expo', 'npm/@clerk/localizations', 'npm/@clerk/ui'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"colinclerk",
"bradenclerk",
"nikosdouvlis",
"chanioxaris",
"jescalan",
"bkalow",
"dominic-clerk",
"mwickett"
],
"versions": 6156
}
Evidence (package doc at flag time)
{
"dependencies_count": 17,
"dist": {
"integrity": "sha512-WJGUV7u+DvblUkFqDFK3Ym3zgfNu4X9BwrsEfJv91t0XOjrx27JDOxV1jyYFp/C6ecEo58HXcFqY+t2WBKoTNw==",
"tarball": "https://registry.npmjs.org/@clerk/clerk-js/-/clerk-js-6.13.0.tgz",
"unpackedSize": 9476044
},
"dist-tags": {
"alpha-v5": "5.0.0-alpha-v5.18",
"beta": "5.0.0-beta.49",
"beta-v5": "5.0.0-beta-v5.21",
"canary": "6.13.1-canary.v20260602022917",
"canary-core3": "6.0.0-canary-core3.v20251208193449",
"latest": "6.13.0",
"latest-v4": "4.73.14",
"latest-v5": "5.125.12",
"next": "4.13.0-next.2",
"snapshot": "6.13.1-snapshot.v20260602010447",
"staging": "4.65.0-staging.v4f9214a"
},
"latest_version": "6.13.0",
"maintainers": [
{
"email": "colin@clerk.dev",
"name": "colinclerk"
},
{
"email": "braden@clerk.dev",
"name": "bradenclerk"
},
{
"email": "nikosdouvlis@gmail.com",
"name": "nikosdouvlis"
},
{
"email": "haris@clerk.dev",
"name": "chanioxaris"
},
{
"email": "soft.joy1514@fastmail.com",
"name": "jescalan"
},
{
"email": "hello@brycekalow.name",
"name": "bkalow"
},
{
"email": "dominic@clerk.dev",
"name": "dominic-clerk"
},
{
"email": "mike@wickett.ca",
"name": "mwickett"
}
],
"num_versions": 6228,
"repository": {
"directory": "packages/clerk-js",
"type": "git",
"url": "git+https://github.com/clerk/javascript.git"
},
"scripts": {
"build": "pnpm build:bundle && pnpm build:declarations",
"build:analyze": "rspack build --config rspack.config.js --env production --env variant=\"clerk.browser\" --env analysis --analyze",
"build:bundle": "pnpm clean && rspack build --config rspack.config.js --env production",
"build:declarations": "tsc -p tsconfig.declarations.json",
"build:sandbox": "pnpm --filter @clerk/ui build:umd && rspack build --config rspack.config.js --env production --env sandbox",
"build:stats": "rspack build --config rspack.config.js --env production --json=stats.json --env variant=\"clerk.browser\"",
"bundlewatch": "FORCE_COLOR=1 bundlewatch --config bundlewatch.config.json",
"bundlewatch:fix": "node bundlewatch-fix.mjs",
"clean": "rimraf ./dist",
"dev": "rspack serve --config rspack.config.js",
"dev:origin": "rspack serve --config rspack.config.js --env devOrigin=http://localhost:${PORT:-4000}",
"dev:sandbox": "pnpm -w dev:sandbox",
"dev:sandbox:serve": "rspack serve --config rspack.config.js --env devOrigin=http://localhost:${PORT:-4000} --env sandbox=1",
"format": "node ../../scripts/format-package.mjs",
"format:check": "node ../../scripts/format-package.mjs --check",
"lint": "eslint src",
"lint:attw": "attw --pack . --profile node16 --ignore-rules named-exports --ignore-rules false-cjs",
"lint:publint": "publint || true",
"postbuild:disabled": "node ../../scripts/search-for-rhc.mjs file dist/clerk.no-rhc.mjs",
"test": "vitest --watch=false",
"test:sandbox:integration": "playwright test",
"test:sandbox:integration:ui": "playwright test --ui",
"test:sandbox:integration:update-snapshots": "playwright test --update-snapshots",
"watch": "rspack build --config rspack.config.js --env production --watch"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=6.13.0 but max published is 6.13.1-canary.v20260527223243",
"mass_publish_burst": "publisher 'GitHub Actions' pushed 534 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/clerk/javascript.git' also claimed by 10 package(s) under different publishers: ['npm/@clerk/expo', 'npm/@clerk/localizations', 'npm/@clerk/ui'] ..."
},
"time": {
"created": "2020-11-10T15:39:52.783Z",
"modified": "2026-06-02T02:31:42.391Z"
}
}