npm create-weave-backend-app @5.0.0
score
0.8
high
flagged
2026-06-18 05:20
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| typosquat | 1.0 | combosquat of 'weave' |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/InditexTech/weavejs.git' also claimed by 9 package(s) under different publishers: ['npm/@inditextech/weave-sdk', 'npm/@inditextech/weave-store-standalone', 'npm/@inditextech/weave-renderer-konva-base'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"marianoao",
"jesusmpc",
"inditex-oso"
],
"versions": 319
}
Evidence (package doc at flag time)
{
"dependencies_count": 3,
"dist": {
"integrity": "sha512-dZOCcJHb0/fBgR7+kwq9RgeNc07sJh+5I6GeMPa3VksDOMnR0DsSGtP8T113vF0fD8ItYKAn4+zbYBKCtB3ckw==",
"tarball": "https://registry.npmjs.org/create-weave-backend-app/-/create-weave-backend-app-5.0.0.tgz",
"unpackedSize": 4635206
},
"dist-tags": {
"latest": "5.0.0",
"next": "5.0.0-SNAPSHOT.413.1",
"v3-latest": "3.10.1"
},
"latest_version": "5.0.0",
"maintainers": [
{
"email": "marianoao@inditex.com",
"name": "marianoao"
},
{
"email": "jesusmpc@inditex.com",
"name": "jesusmpc"
},
{
"email": "oso@inditex.com",
"name": "inditex-oso"
}
],
"num_versions": 320,
"repository": {
"type": "git",
"url": "git+https://github.com/InditexTech/weavejs.git"
},
"scripts": {
"build": "tsc --noEmit && tsdown",
"bump:snapshot": "tsc --noEmit && tsdown --sourcemap",
"clean": "rimraf dist",
"dev": "tsdown --watch",
"format": "prettier --write ./src ./template",
"link": "npm link",
"lint": "eslint ./src",
"lint:fix": "npm run lint -- --fix",
"pack": "npm pack",
"publish:snapshot": "npm publish --tag next --access public",
"release:perform": "npm publish --access public",
"release:prepare": "npm run verify",
"test": "echo \"No tests defined\" && exit 0",
"types:check": "tsc --noEmit",
"unpublish": "npm unpublish --force",
"verify": "npm run lint && npm run test && npm run build",
"version:development": "npm version $(npm version minor)-SNAPSHOT",
"version:release": "npm version $RELEASE_VERSION -m \"[npm-scripts] prepare release $RELEASE_VERSION\" --tag-version-prefix \"\""
},
"signal_details": {
"shared_repo_different_publisher": "repo 'git+https://github.com/InditexTech/weavejs.git' also claimed by 9 package(s) under different publishers: ['npm/@inditextech/weave-sdk', 'npm/@inditextech/weave-store-standalone', 'npm/@inditextech/weave-renderer-konva-base'] ...",
"typosquat": "combosquat of 'weave'"
},
"time": {
"created": "2025-04-25T11:19:46.769Z",
"modified": "2026-06-18T10:19:56.955Z"
}
}