npm @gitlab/duo-ui @15.37.0
score
0.65
med
flagged
2026-06-22 11:10
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| publisher_unrecognized | 0.7 | latest published by 'GitLab CI/CD', not in maintainer set |
| topology | ||
| dependency_added_unknown | 0.6 | 2 new non-watchlisted dep(s): ['morphdom', 'remend'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"rob.hunt-gitlab",
"gitlab-administration",
"tzallmann",
"gitlab-bot",
"apanchal-gitlab",
"jhope-gitlab",
"drosse-gitlab"
],
"versions": 233
}
Evidence (package doc at flag time)
{
"dependencies_count": 15,
"dist": {
"integrity": "sha512-QM/XuH+U/bJkQxulW0Rcs3IkGRDuOsi+eFXoJvwWcnWnJKAQmfggBezrza7bZplCXUCN2fJ4wZfQvZv2jKTTBw==",
"tarball": "https://registry.npmjs.org/@gitlab/duo-ui/-/duo-ui-15.37.0.tgz",
"unpackedSize": 1745532
},
"dist-tags": {
"latest": "15.37.0"
},
"latest_version": "15.37.0",
"maintainers": [
{
"email": "rhunt@gitlab.com",
"name": "rob.hunt-gitlab"
},
{
"email": "frontend-administration@gitlab.com",
"name": "gitlab-administration"
},
{
"email": "tzallmann@gitlab.com",
"name": "tzallmann"
},
{
"email": "incoming+gitlab-com/npm-bot@incoming.gitlab.com",
"name": "gitlab-bot"
},
{
"email": "apanchal@gitlab.com",
"name": "apanchal-gitlab"
},
{
"email": "jhope@gitlab.com",
"name": "jhope-gitlab"
},
{
"email": "drossetti@gitlab.com",
"name": "drosse-gitlab"
}
],
"num_versions": 235,
"repository": {
"type": "git",
"url": "git+ssh://git@gitlab.com/gitlab-org/duo-ui.git"
},
"scripts": {
"build": "NODE_ENV=production rollup -c",
"clean": "rm -r dist storybook src/scss/utilities.scss",
"eslint": "eslint --max-warnings 0 --ext .js,.vue .",
"eslint:fix": "yarn eslint --fix",
"generate:component": "plop",
"lint": "run-p prettier eslint stylelint markdownlint",
"lint:fix": "run-s eslint:fix prettier:fix stylelint:fix markdownlint:fix",
"markdownlint": "markdownlint '**/*.md' --ignore node_modules --ignore CHANGELOG.md --ignore",
"markdownlint:fix": "yarn markdownlint --fix",
"prettier": "prettier --check '**/*.{js,mjs,ts,vue}'",
"prettier:fix": "prettier --write '**/*.{js,mjs,ts,vue}'",
"start": "yarn storybook",
"storybook": "storybook dev --ci --host ${STORYBOOK_HOST:-localhost} --port 9001 -c .storybook",
"storybook-vue3": "VUE_VERSION=3 storybook dev --ci --host ${STORYBOOK_HOST:-localhost} --port 9001 -c .storybook",
"storybook:build:prod": "storybook build -c .storybook -o storybook",
"storybook:build:test": "yarn build && IS_VISUAL_TEST=true NODE_ENV=test storybook build --test -c .storybook -o storybook",
"storybook:run": "npx http-server -bgs -p 9001 ./storybook",
"stylelint": "stylelint 'src/**/*.scss'",
"stylelint:fix": "yarn stylelint --fix",
"sync:gdk": "scripts/sync-to-gdk.sh",
"sync:gdk:watch": "scripts/sync-to-gdk.sh --watch",
"tailwind-config-viewer:export": "tailwind-config-viewer export ./tailwind-config-viewer-static",
"tailwind-config-viewer:start": "tailwind-config-viewer -o",
"test": "run-s test:unit test:visual",
"test:integration": "yarn run test:integration:server",
"test:integration:server": "NODE_ENV=test start-test storybook:run http-get://${STORYBOOK_HOST:-localhost}:9001/iframe.html",
"test:unit": "NODE_ENV=test jest",
"test:unit-vue3": "VUE_VERSION=3 NODE_ENV=test jest",
"test:unit-vue3:coverage": "VUE_VERSION=3 yarn test:unit --coverage",
"test:unit-vue3:debug": "VUE_VERSION=3 NODE_ENV=test node --inspect node_modules/.bin/jest --testPathIgnorePatterns storyshot.spec.js --watch --runInBand",
"test:unit-vue3:watch": "VUE_VERSION=3 yarn test:unit --watch",
"test:unit:coverage": "yarn test:unit --coverage",
"test:unit:debug": "NODE_ENV=test node --inspect node_modules/.bin/jest --testPathIgnorePatterns storyshot.spec.js --watch --runInBand",
"test:unit:watch": "yarn test:unit --watch",
"test:visual": "./bin/run-visual-tests.sh 'test-storybook --browsers firefox --verbose --url http://localhost:9001'",
"test:visual:internal": "NODE_ENV=test IS_VISUAL_TEST=true start-test storybook:run http-get://${STORYBOOK_HOST:-localhost}:9001/iframe.html",
"test:visual:update": "./bin/run-visual-tests.sh 'test-storybook -u --browsers firefox --verbose --url http://localhost:9001'",
"translations:collect": "make translations.js"
},
"signal_details": {
"dependency_added_unknown": "2 new non-watchlisted dep(s): ['morphdom', 'remend']",
"publisher_unrecognized": "latest published by 'GitLab CI/CD', not in maintainer set"
},
"time": {
"created": "2024-10-25T09:44:53.558Z",
"modified": "2026-06-22T16:10:12.353Z"
}
}