BEACON

← candidates

npm @superfluid-finance/metadata @1.6.3

score
0.7 high
flagged 2026-06-17 12:31
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
dist_tag_anomaly 0.5 dist-tags.latest=1.6.3 but max published is 1.6.4-dev.2fa7d88.0
shared_repo_different_publisher 0.9 repo 'git+https://github.com/superfluid-org/protocol-monorepo.git' also claimed by 1 package(s) under different publishers: ['npm/@superfluid-finance/ethereum-contracts']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "superfluid_finance",
    "miao.decentral.ee"
  ],
  "versions": 276
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-hB76JMlnYQ8Rjrxd/4SQPRTCvviPOrEd92M+yFdDthTd2NVPwOtm9mQiBp980FHoAWamk7JcV3DAOfAdErRgGg==",
    "tarball": "https://registry.npmjs.org/@superfluid-finance/metadata/-/metadata-1.6.3.tgz",
    "unpackedSize": 139161
  },
  "dist-tags": {
    "dev": "1.6.4-dev.23964a6.0",
    "latest": "1.6.3"
  },
  "latest_version": "1.6.3",
  "maintainers": [
    {
      "email": "dev-admin+npm@superfluid.finance",
      "name": "superfluid_finance"
    },
    {
      "email": "miao@decentral.ee",
      "name": "miao.decentral.ee"
    }
  ],
  "num_versions": 276,
  "repository": {
    "directory": "packages/metadata",
    "type": "git",
    "url": "git+https://github.com/superfluid-org/protocol-monorepo.git"
  },
  "scripts": {
    "build": "./build.sh && echo '@superfluid-finance/metadata build successfully'",
    "bump-version-to": "./bump-version-to.sh $@",
    "check-updates": "ncu --target minor",
    "fix": "run-s fix:*",
    "fix:eslint": "yarn lint:js-eslint --fix",
    "lint": "run-s lint:*",
    "lint:consistency": "./tasks/compare-committed-against-build.sh",
    "lint:js-eslint": "eslint . --max-warnings=0 --report-unused-disable-directives && echo '\u2714  Your .js files look good.'"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=1.6.3 but max published is 1.6.4-dev.2fa7d88.0",
    "shared_repo_different_publisher": "repo 'git+https://github.com/superfluid-org/protocol-monorepo.git' also claimed by 1 package(s) under different publishers: ['npm/@superfluid-finance/ethereum-contracts']"
  },
  "time": {
    "created": "2023-07-11T13:01:09.150Z",
    "modified": "2026-06-16T15:36:11.446Z"
  }
}