npm scandit-react-native-datacapture-parser @8.4.0
score
0.56
med
flagged
2026-06-19 01:14
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| typosquat | 1.0 | combosquat of 'react' |
| dist_tag_anomaly | 0.5 | dist-tags.latest=8.4.0 but max published is 8.5.0-beta.1 |
| mass_publish_burst | 0.8 | publisher 'scandit-ci' pushed 23 packages in the last 15min on npm |
| enrichment | ||
| depsdev_no_source_repo | 0.5 | deps.dev has no SOURCE_REPO link for this version |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"moritz-scandit",
"scandit-lorenzo",
"scandit-ci"
],
"versions": 211
}
Evidence (package doc at flag time)
{
"dependencies_count": 3,
"dist": {
"integrity": "sha512-diPNvr4AEBF2R3jLxQpPLp3+1URgJsnJuw3lrB137rkzFcD9duJWGM+v6B2wSIC4I+/Oye0rnAagsPTl87P4Pg==",
"tarball": "https://registry.npmjs.org/scandit-react-native-datacapture-parser/-/scandit-react-native-datacapture-parser-8.4.0.tgz",
"unpackedSize": 225765
},
"dist-tags": {
"6.22-stable": "6.22.3",
"6.23-stable": "6.23.4",
"6.24-stable": "6.24.2",
"6.25-stable": "6.25.3",
"6.28-stable": "6.28.10",
"7.2-stable": "7.2.6",
"7.3-stable": "7.3.4",
"7.4-stable": "7.4.5",
"7.5-stable": "7.5.2",
"7.6-stable": "7.6.14",
"8.0-stable": "8.0.1",
"8.1-stable": "8.1.5",
"8.2-stable": "8.2.1",
"8.3-stable": "8.3.1",
"latest": "8.4.0",
"next": "8.5.0-beta.1"
},
"latest_version": "8.4.0",
"maintainers": [
{
"email": "moritz@scandit.com",
"name": "moritz-scandit"
},
{
"email": "lorenzo@scandit.com",
"name": "scandit-lorenzo"
},
{
"email": "info@scandit.com",
"name": "scandit-ci"
}
],
"num_versions": 213,
"repository": null,
"scripts": {
"build": "rollup -c ../../rollup.config.js --bundleConfigAsCjs",
"generate-flow": "flowgen dist/dts/index.d.ts -o dist/index.js.flow",
"lint": "eslint ts",
"test": "pnpm run lint"
},
"signal_details": {
"depsdev_no_source_repo": "deps.dev has no SOURCE_REPO link for this version",
"dist_tag_anomaly": "dist-tags.latest=8.4.0 but max published is 8.5.0-beta.1",
"mass_publish_burst": "publisher 'scandit-ci' pushed 23 packages in the last 15min on npm",
"no_repo": "package.json has no repository field",
"typosquat": "combosquat of 'react'"
},
"time": {
"created": "2020-09-04T18:22:37.273Z",
"modified": "2026-06-19T06:14:48.275Z"
}
}