npm lucide-react @1.18.0
score
0.8
high
flagged
2026-06-16 08:18
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| typosquat | 1.0 | combosquat of 'react' |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/lucide-icons/lucide.git' also claimed by 3 package(s) under different publishers: ['npm/lucide', 'npm/lucide-solid', 'npm/lucide-static'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"ericfennis"
],
"versions": 669
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-LZDb7H/0YfM+RJncD0hDQRCAu+vSGODqpe35TuVI8EuXaRjkczbsx7p8dY4J87F/MUSj6bpYqeI8nw8qXaAdmA==",
"tarball": "https://registry.npmjs.org/lucide-react/-/lucide-react-1.18.0.tgz",
"unpackedSize": 30227687
},
"dist-tags": {
"beta": "0.266.0-beta.0",
"dev": "0.554.0-rc.0",
"latest": "1.18.0",
"next": "1.3.0"
},
"latest_version": "1.18.0",
"maintainers": [
{
"email": "eric.fennis@gmail.com",
"name": "ericfennis"
}
],
"num_versions": 670,
"repository": {
"directory": "packages/lucide-react",
"type": "git",
"url": "git+https://github.com/lucide-icons/lucide.git"
},
"scripts": {
"build": "pnpm clean && pnpm copy:license && pnpm build:icons && pnpm typecheck && pnpm build:bundles",
"build:bundles": "rollup -c ./rollup.config.mjs",
"build:icons": "build-icons --output=./src --templateSrc=./scripts/exportTemplate.mts --renderUniqueKey --withAliases --withDynamicImports --separateAliasesFile --separateAliasesFileIgnore=fingerprint --aliasesFileExtension=.ts --iconFileExtension=.ts --exportFileName=index.ts",
"clean": "rm -rf dist && rm -rf stats && rm -rf ./src/icons/*.ts && rm -f dynamic.{d.ts,d.mts,mts,mjs,mjs.map} && rm -f dynamicIconImports.d.ts",
"copy:license": "cp ../../LICENSE ./LICENSE",
"test": "pnpm build:icons && vitest run",
"test:watch": "vitest watch",
"typecheck": "tsc",
"typecheck:watch": "tsc -w",
"version": "pnpm version --git-tag-version=false"
},
"signal_details": {
"shared_repo_different_publisher": "repo 'git+https://github.com/lucide-icons/lucide.git' also claimed by 3 package(s) under different publishers: ['npm/lucide', 'npm/lucide-solid', 'npm/lucide-static']",
"typosquat": "combosquat of 'react'"
},
"time": {
"created": "2020-10-19T19:44:16.461Z",
"modified": "2026-06-12T12:40:57.686Z"
}
}