npm @actual-app/sync-server @26.6.0
score
0.7
high
flagged
2026-06-19 19:36
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=26.6.0 but max published is 26.7.0-nightly.20260602 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/actualbudget/actual.git' also claimed by 5 package(s) under different publishers: ['npm/@actual-app/web', 'npm/@actual-app/cli', 'npm/@actual-app/api'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"matissjanis",
"dolphish",
"joeljeremy",
"matt-fidd",
"actualbudget"
],
"versions": 398
}
Evidence (package doc at flag time)
{
"dependencies_count": 18,
"dist": {
"integrity": "sha512-XGFVj9rlRZTPYruOBmokgcEf596F7QISLV/wgGJCPzc7ePSactqpaiCYKPEeEKUBs0ouqKQKklfc3+jAQWEaDA==",
"tarball": "https://registry.npmjs.org/@actual-app/sync-server/-/sync-server-26.6.0.tgz",
"unpackedSize": 705795
},
"dist-tags": {
"latest": "26.6.0",
"nightly": "26.7.0-nightly.20260620"
},
"latest_version": "26.6.0",
"maintainers": [
{
"email": "npmjs.org@mja.lv",
"name": "matissjanis"
},
{
"email": "julian.dominguezschatz@gmail.com",
"name": "dolphish"
},
{
"email": "joeljeremy.marquez@gmail.com",
"name": "joeljeremy"
},
{
"email": "npm@m.fiddaman.uk",
"name": "matt-fidd"
},
{
"email": "dev@actualbudget.org",
"name": "actualbudget"
}
],
"num_versions": 399,
"repository": {
"directory": "packages/sync-server",
"type": "git",
"url": "git+https://github.com/actualbudget/actual.git"
},
"scripts": {
"build": "vite build",
"db:downgrade": "yarn build && cross-env NODE_ENV=development node build/scripts/run-migrations.js down",
"db:migrate": "yarn build && cross-env NODE_ENV=development node build/scripts/run-migrations.js up",
"db:test-downgrade": "yarn build && cross-env NODE_ENV=test node build/scripts/run-migrations.js down",
"db:test-migrate": "yarn build && cross-env NODE_ENV=test node build/scripts/run-migrations.js up",
"disable-openid": "yarn build && node build/scripts/disable-openid.js",
"health-check": "yarn build && node build/scripts/health-check.js",
"reset-password": "yarn build && node build/scripts/reset-password.js",
"start": "yarn build && node build/app.js",
"start-monitor": "nodemon --exec 'yarn build && node build/app.js' --ignore './build/**/*' --ext 'ts,js' build/app.js",
"test": "NODE_ENV=test NODE_OPTIONS='--experimental-vm-modules --trace-warnings' vitest --run",
"typecheck": "tsgo -b && tsc-strict"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=26.6.0 but max published is 26.7.0-nightly.20260602",
"shared_repo_different_publisher": "repo 'git+https://github.com/actualbudget/actual.git' also claimed by 5 package(s) under different publishers: ['npm/@actual-app/web', 'npm/@actual-app/cli', 'npm/@actual-app/api'] ..."
},
"time": {
"created": "2025-04-13T21:26:03.336Z",
"modified": "2026-06-20T00:35:56.997Z"
}
}