npm nx @23.0.0
score
0.7975
high
flagged
2026-06-22 16:06
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=23.0.0 but max published is 23.1.0-beta.0 |
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/nrwl/nx.git' also claimed by 10 package(s) under different publishers: ['npm/@nx/rollup', 'npm/@nx/docker', 'npm/@nx/nuxt'] ... |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"jack-nrwl",
"meeroslav",
"nrwlowner",
"nrwl-jason",
"juristr",
"altan-nrwl",
"jameshenry",
"vsavkin"
],
"versions": 2588
}
Evidence (package doc at flag time)
{
"dependencies_count": 111,
"dist": {
"integrity": "sha512-60HZVOQErtSTnR+UVPBYI5sYe8R2nrHttI0tVHhEj91kJpbXvL15gSh+rv6lUcAJtDfPymoEn20jGzN4oOLKAg==",
"tarball": "https://registry.npmjs.org/nx/-/nx-23.0.0.tgz",
"unpackedSize": 16819864
},
"dist-tags": {
"canary": "23.1.0-canary.20260622-a793455",
"latest": "23.0.0",
"next": "23.1.0-beta.1",
"previous": "21.6.11",
"pull-request": "23.0.0-pr.33655.96527d2"
},
"latest_version": "23.0.0",
"maintainers": [
{
"email": "jack@nrwl.io",
"name": "jack-nrwl"
},
{
"email": "missing.manual@gmail.com",
"name": "meeroslav"
},
{
"email": "victor@nrwl.io",
"name": "nrwlowner"
},
{
"email": "jason@nrwl.io",
"name": "nrwl-jason"
},
{
"email": "juri.strumpflohner@gmail.com",
"name": "juristr"
},
{
"email": "altan@nrwl.io",
"name": "altan-nrwl"
},
{
"email": "james@henry.sc",
"name": "jameshenry"
},
{
"email": "avix1000@gmail.com",
"name": "vsavkin"
}
],
"num_versions": 2589,
"repository": {
"directory": "packages/nx",
"type": "git",
"url": "https://github.com/nrwl/nx.git"
},
"scripts": {
"postinstall": "node -e \"try{require('./dist/bin/post-install')}catch(e){}\""
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=23.0.0 but max published is 23.1.0-beta.0",
"install_script_payload": "install/lifecycle script matches payload regex",
"shared_repo_different_publisher": "repo 'https://github.com/nrwl/nx.git' also claimed by 10 package(s) under different publishers: ['npm/@nx/rollup', 'npm/@nx/docker', 'npm/@nx/nuxt'] ..."
},
"time": {
"created": "2011-08-08T05:06:23.816Z",
"modified": "2026-06-22T21:05:54.182Z"
}
}