npm @aave/graphql @3.0.1
score
0.7
high
flagged
2026-06-05 04:50
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| size_spike | 0.5 | unpackedSize 2325709 -> 25215358 (10.8×) |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git://github.com/aave/aave-sdk.git' also claimed by 3 package(s) under different publishers: ['npm/@aave/react', 'npm/@aave/client', 'npm/@aave/types'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"sams_aave",
"donosonaumczuk",
"aavesome",
"miguel-martinez-aave",
"mpsc0x",
"lochieaxon",
"grothem",
"npm_avaralabs"
],
"versions": 128
}
Evidence (package doc at flag time)
{
"dependencies_count": 4,
"dist": {
"integrity": "sha512-HDQ75BHSwdmqjuDLZb+c0xf38gcDXcrX2ogJq61EuDB0tEIUpQAHw7djRa4yIaOyyme1tNOBCuBoNUV3WSuWLA==",
"tarball": "https://registry.npmjs.org/@aave/graphql/-/graphql-3.0.1.tgz",
"unpackedSize": 25215358
},
"dist-tags": {
"canary": "0.0.0-canary-20250917135314",
"latest": "3.0.1",
"next": "1.0.0-next.38",
"preview": "0.0.0-preview-20260515181331",
"snapshot": "0.0.0-snapshot-20260601213608"
},
"latest_version": "3.0.1",
"maintainers": [
{
"email": "sam.s@aave.com",
"name": "sams_aave"
},
{
"email": "alan@aave.com",
"name": "donosonaumczuk"
},
{
"email": "tech@aave.com",
"name": "aavesome"
},
{
"email": "miguel@aave.com",
"name": "miguel-martinez-aave"
},
{
"email": "evgeni@avara.xyz",
"name": "mpsc0x"
},
{
"email": "lochieaxon@gmail.com",
"name": "lochieaxon"
},
{
"email": "grothem@gmail.com",
"name": "grothem"
},
{
"email": "npm@avaralabs.com",
"name": "npm_avaralabs"
}
],
"num_versions": 128,
"repository": {
"directory": "packages/graphql",
"type": "git",
"url": "git://github.com/aave/aave-sdk.git"
},
"scripts": {
"build": "tsup",
"check": "gql.tada check",
"doctor": "gql.tada doctor",
"gql:download:local": "./scripts/fetch-schema.ts http://localhost:3007/graphql ./src/schema.json && gql-tada generate schema 'http://localhost:3007/graphql' --output './schema.graphql'",
"gql:download:staging": "./scripts/fetch-schema.ts https://api.v4.staging.aave.com/graphql ./src/schema.json && gql-tada generate schema 'https://api.v4.staging.aave.com/graphql' --output './schema.graphql'",
"gql:generate:cache": "gql.tada generate turbo",
"gql:generate:introspection": "gql-tada generate output",
"gql:turbo": "gql-tada turbo",
"prebuild": "pnpm run gql:turbo"
},
"signal_details": {
"shared_repo_different_publisher": "repo 'git://github.com/aave/aave-sdk.git' also claimed by 3 package(s) under different publishers: ['npm/@aave/react', 'npm/@aave/client', 'npm/@aave/types']",
"size_spike": "unpackedSize 2325709 -> 25215358 (10.8\u00d7)"
},
"time": {
"created": "2025-07-29T16:45:41.088Z",
"modified": "2026-06-02T16:10:34.783Z"
}
}