npm react-refresh @0.18.0

score

0.7 high

flagged 2026-06-16 12:54

signals by category

topology 3

maintainers added: —

Signals fired

signal	weight	rationale
topology
typosquat	1.0	combosquat of 'react'
dist_tag_anomaly	0.5	dist-tags.latest=0.18.0 but max published is 0.19.0-canary-a757cb76-20251002
shared_repo_different_publisher	0.9	repo 'git+https://github.com/facebook/react.git' also claimed by 1 package(s) under different publishers: ['npm/react-linked-input']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "react-bot"
  ],
  "versions": 2613
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-QgT5//D3jfjJb6Gsjxv0Slpj23ip+HtOpnNgnb2S5zU3CB26G/IDPGoy4RJB42wzFE46DRsstbW6tKHoKbhAxw==",
    "tarball": "https://registry.npmjs.org/react-refresh/-/react-refresh-0.18.0.tgz",
    "unpackedSize": 58408
  },
  "dist-tags": {
    "beta": "0.16.0-beta-26f2496093-20240514",
    "canary": "0.19.0-canary-ad78e251-20260616",
    "experimental": "0.0.0-experimental-ad78e251-20260616",
    "latest": "0.18.0",
    "next": "0.19.0-canary-d5736f09-20260507",
    "rc": "0.16.0-rc.1"
  },
  "latest_version": "0.18.0",
  "maintainers": [
    {
      "email": "react-core@meta.com",
      "name": "react-bot"
    }
  ],
  "num_versions": 2615,
  "repository": {
    "directory": "packages/react",
    "type": "git",
    "url": "git+https://github.com/facebook/react.git"
  },
  "scripts": null,
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=0.18.0 but max published is 0.19.0-canary-a757cb76-20251002",
    "shared_repo_different_publisher": "repo 'git+https://github.com/facebook/react.git' also claimed by 1 package(s) under different publishers: ['npm/react-linked-input']",
    "typosquat": "combosquat of 'react'"
  },
  "time": {
    "created": "2019-06-14T19:21:04.586Z",
    "modified": "2026-06-16T17:54:16.645Z"
  }
}