npm @vultisig/sdk @2.8.5
score
0.7294
high
flagged
2026-06-26 14:28
Signals fired
| signal | weight | rationale |
|---|---|---|
| cadence | ||
| rapid_release | 0.8 | 4 versions in last 24h: ['2.8.2', '2.8.3', '2.8.4', '2.8.5'] |
| topology | ||
| mass_publish_burst | 0.8 | publisher 'rcoderdev' pushed 5 packages in the last 15min on npm |
| dependency_added_unknown | 0.6 | 6 new non-watchlisted dep(s): ['@balancer-labs/balancer-maths', '@balancer/sdk', '@cosmjs/encoding', '@scure/base', 'bech32'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"jpthor",
"rcoderdev",
"bornslippynuxx"
],
"versions": 95
}
Evidence (package doc at flag time)
{
"dependencies_count": 58,
"dist": {
"integrity": "sha512-0HkcmaPfGaxUQ+U5IXcRWd1MLirX/dlSE9qFfX45yVebjER1PfPnI/BCSG6x6/cWtqrSTttklRY5/PvGUMIf/w==",
"tarball": "https://registry.npmjs.org/@vultisig/sdk/-/sdk-2.8.5.tgz",
"unpackedSize": 120572853
},
"dist-tags": {
"alpha": "0.1.1-alpha.0",
"latest": "2.8.5"
},
"latest_version": "2.8.5",
"maintainers": [
{
"email": "jpthor89@gmail.com",
"name": "jpthor"
},
{
"email": "radzionch@gmail.com",
"name": "rcoderdev"
},
{
"email": "bornslippynuxx@proton.me",
"name": "bornslippynuxx"
}
],
"num_versions": 104,
"repository": {
"directory": "vultisig-sdk",
"type": "git",
"url": "https://github.com/vultisig/vultisig-sdk.git"
},
"scripts": {
"_____BUILD_____": "",
"_____HOOKS_____": "",
"_____PLATFORM_BUILDS_____": "",
"_____QUALITY_____": "",
"_____TEST_BY_TYPE_____": "",
"_____TEST_E2E_INDIVIDUAL_____": "",
"_____TEST_RUN_____": "",
"_____TEST_UTILS_____": "",
"_____TEST_WATCH_____": "",
"build": "yarn clean && yarn build:platforms && yarn build:types",
"build:fast": "yarn clean && BUILD_TARGET=node rollup -c rollup.platforms.config.js",
"build:js": "yarn build:platforms",
"build:platform:browser": "BUILD_TARGET=browser rollup -c rollup.platforms.config.js",
"build:platform:chrome-extension": "BUILD_TARGET=chrome-extension rollup -c rollup.platforms.config.js",
"build:platform:electron": "BUILD_TARGET=electron rollup -c rollup.platforms.config.js",
"build:platform:node": "BUILD_TARGET=node rollup -c rollup.platforms.config.js",
"build:platform:react-native": "BUILD_TARGET=react-native rollup -c rollup.platforms.config.js",
"build:platform:vite": "BUILD_TARGET=vite rollup -c rollup.platforms.config.js",
"build:platforms": "concurrently \"yarn build:platform:node\" \"yarn build:platform:browser\" \"yarn build:platform:electron\" \"yarn build:platform:chrome-extension\" \"yarn build:platform:react-native\" \"yarn build:platform:vite\"",
"build:types": "rollup -c rollup.types.config.js",
"clean": "rm -rf dist",
"dev": "BUILD_TARGET=node rollup -c rollup.platforms.config.js -w",
"lint": "eslint --config ../../.config/eslint.config.mjs src/**/*.{ts,tsx}",
"lint:fix": "eslint --config ../../.config/eslint.config.mjs src/**/*.{ts,tsx} --fix",
"prepack": "echo 'Build skipped for development'",
"prepublishOnly": "echo 'Typecheck skipped - CI runs quality checks before publish'",
"test": "vitest run --config tests/unit/vitest.config.ts tests/unit",
"test:all": "yarn test:unit && yarn test:integration && yarn test:e2e",
"test:changed": "vitest related --run",
"test:coverage": "vitest run --config tests/unit/vitest.config.ts tests/unit --coverage",
"test:e2e": "NODE_OPTIONS=--max-old-space-size=8192 vitest run --config tests/e2e/vitest.config.ts tests/e2e/",
"test:e2e:balance": "vitest run --config tests/e2e/vitest.config.ts tests/e2e/balance-operations.test.ts",
"test:e2e:fast-signing": "vitest run --config tests/e2e/vitest.config.ts tests/e2e/fast-signing.test.ts",
"test:e2e:fiat-value": "vitest run --config tests/e2e/vitest.config.ts tests/e2e/fiat-value-service.test.ts",
"test:e2e:funded": "NODE_OPTIONS=--max-old-space-size=8192 vitest run --config tests/e2e/funded/vitest.config.ts",
"test:e2e:funded:qbtc": "NODE_OPTIONS=--max-old-space-size=8192 vitest run --config tests/e2e/funded/vitest.config.ts tests/e2e/funded/qbtc-send.test.ts",
"test:e2e:gas": "vitest run --config tests/e2e/vitest.config.ts tests/e2e/gas-estimation.test.ts",
"test:e2e:multi-chain": "vitest run --config tests/e2e/vitest.config.ts tests/e2e/multi-chain-coverage.test.ts",
"test:e2e:prepare-send": "vitest run --config tests/e2e/vitest.config.ts tests/e2e/prepare-send-tx.test.ts",
"test:e2e:secure-signing": "vitest run --config tests/e2e/vitest.config.ts tests/e2e/secure-vault-multiparty-signing.test.ts",
"test:e2e:seedphrase": "vitest run --config tests/e2e/vitest.config.ts tests/e2e/seedphrase-import.test.ts",
"test:e2e:sign-bytes": "vitest run --config tests/e2e/vitest.config.ts tests/e2e/sign-bytes.test.ts",
"test:e2e:swap-quotes": "vitest run --config tests/e2e/vitest.config.ts tests/e2e/swap-quotes.test.ts",
"test:e2e:swap-transactions": "vitest run --config tests/e2e/vitest.config.ts tests/e2e/swap-transactions.test.ts",
"test:e2e:watch": "vitest --config tests/e2e/vitest.config.ts tests/e2e",
"test:integration": "vitest run --config tests/integration/vitest.config.ts tests/integration",
"test:integration:watch": "vitest --config tests/integration/vitest.config.ts tests/integration",
"test:unit": "vitest run --config tests/unit/vitest.config.ts tests/unit",
"test:unit:watch": "vitest --config tests/unit/vitest.config.ts tests/unit",
"test:watch": "vitest --config tests/unit/vitest.config.ts",
"typecheck": "tsc --noEmit --skipLibCheck"
},
"signal_details": {
"dependency_added_unknown": "6 new non-watchlisted dep(s): ['@balancer-labs/balancer-maths', '@balancer/sdk', '@cosmjs/encoding', '@scure/base', 'bech32'] ...",
"mass_publish_burst": "publisher 'rcoderdev' pushed 5 packages in the last 15min on npm",
"rapid_release": "4 versions in last 24h: ['2.8.2', '2.8.3', '2.8.4', '2.8.5']"
},
"time": {
"created": "2025-12-08T03:53:44.059Z",
"modified": "2026-06-26T17:09:14.396Z"
}
}