npm lucide-static @1.19.0
score
0.7667
high
flagged
2026-06-16 08:20
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| typosquat | 1.0 | combosquat of 'lucide' |
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/lucide-icons/lucide.git' also claimed by 7 package(s) under different publishers: ['npm/lucide-preact', 'npm/@lucide/astro', 'npm/@lucide/vue'] ... |
| repository_url_changed | 0.7 | 'git+https://github.com/lucide-icons/lucide.git' -> 'https://github.com/lucide-icons/lucide.git' |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"ericfennis"
],
"versions": 597
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-o2nYeN4JVJWCMMvdRIwl0w6FER8Nlvl47xBHXGLYmQb13dAXokqpML2nDuD6OToYpYmq+qGPydW0TojxWRW/KA==",
"tarball": "https://registry.npmjs.org/lucide-static/-/lucide-static-1.19.0.tgz",
"unpackedSize": 46783851
},
"dist-tags": {
"latest": "1.19.0",
"next": "1.3.0"
},
"latest_version": "1.19.0",
"maintainers": [
{
"email": "eric.fennis@gmail.com",
"name": "ericfennis"
}
],
"num_versions": 599,
"repository": {
"type": "git",
"url": "https://github.com/lucide-icons/lucide.git"
},
"scripts": {
"build": "pnpm clean && pnpm copy:license && pnpm build:icons && pnpm build:bundles && pnpm build:lib && pnpm build:tags",
"build:bundles": "rollup -c rollup.config.mjs",
"build:icons": "build-icons --output=./src --templateSrc=./scripts/exportTemplate.mts --iconFileExtension=.ts --withAliases --aliasNamesOnly --aliasesFileExtension=.ts --exportFileName=index.ts",
"build:lib": "node ./scripts/buildLib.mts",
"build:tags": "node ./scripts/migrateIconsToTags.mts",
"clean": "rm -rf lib && rm -rf build && rm -rf icons && rm -f sprite.svg",
"copy:license": "cp ../../LICENSE ./LICENSE"
},
"signal_details": {
"repository_url_changed": "'git+https://github.com/lucide-icons/lucide.git' -> 'https://github.com/lucide-icons/lucide.git'",
"shared_repo_different_publisher": "repo 'https://github.com/lucide-icons/lucide.git' also claimed by 7 package(s) under different publishers: ['npm/lucide-preact', 'npm/@lucide/astro', 'npm/@lucide/vue'] ...",
"typosquat": "combosquat of 'lucide'"
},
"time": {
"created": "2021-10-01T13:46:52.302Z",
"modified": "2026-06-16T13:19:58.329Z"
}
}