BEACON

← candidates

npm lucide-react @1.18.0

score
0.8 high
flagged 2026-06-16 08:18
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
typosquat 1.0 combosquat of 'react'
shared_repo_different_publisher 0.9 repo 'git+https://github.com/lucide-icons/lucide.git' also claimed by 3 package(s) under different publishers: ['npm/lucide', 'npm/lucide-solid', 'npm/lucide-static']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "ericfennis"
  ],
  "versions": 669
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-LZDb7H/0YfM+RJncD0hDQRCAu+vSGODqpe35TuVI8EuXaRjkczbsx7p8dY4J87F/MUSj6bpYqeI8nw8qXaAdmA==",
    "tarball": "https://registry.npmjs.org/lucide-react/-/lucide-react-1.18.0.tgz",
    "unpackedSize": 30227687
  },
  "dist-tags": {
    "beta": "0.266.0-beta.0",
    "dev": "0.554.0-rc.0",
    "latest": "1.18.0",
    "next": "1.3.0"
  },
  "latest_version": "1.18.0",
  "maintainers": [
    {
      "email": "eric.fennis@gmail.com",
      "name": "ericfennis"
    }
  ],
  "num_versions": 670,
  "repository": {
    "directory": "packages/lucide-react",
    "type": "git",
    "url": "git+https://github.com/lucide-icons/lucide.git"
  },
  "scripts": {
    "build": "pnpm clean && pnpm copy:license && pnpm build:icons && pnpm typecheck && pnpm build:bundles",
    "build:bundles": "rollup -c ./rollup.config.mjs",
    "build:icons": "build-icons --output=./src --templateSrc=./scripts/exportTemplate.mts --renderUniqueKey --withAliases --withDynamicImports --separateAliasesFile --separateAliasesFileIgnore=fingerprint --aliasesFileExtension=.ts --iconFileExtension=.ts --exportFileName=index.ts",
    "clean": "rm -rf dist && rm -rf stats && rm -rf ./src/icons/*.ts && rm -f dynamic.{d.ts,d.mts,mts,mjs,mjs.map} && rm -f dynamicIconImports.d.ts",
    "copy:license": "cp ../../LICENSE ./LICENSE",
    "test": "pnpm build:icons && vitest run",
    "test:watch": "vitest watch",
    "typecheck": "tsc",
    "typecheck:watch": "tsc -w",
    "version": "pnpm version --git-tag-version=false"
  },
  "signal_details": {
    "shared_repo_different_publisher": "repo 'git+https://github.com/lucide-icons/lucide.git' also claimed by 3 package(s) under different publishers: ['npm/lucide', 'npm/lucide-solid', 'npm/lucide-static']",
    "typosquat": "combosquat of 'react'"
  },
  "time": {
    "created": "2020-10-19T19:44:16.461Z",
    "modified": "2026-06-12T12:40:57.686Z"
  }
}