npm react-native-iap @15.3.6
score
0.7
high
flagged
2026-07-06 15:16
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| typosquat | 1.0 | combosquat of 'react' |
| dist_tag_anomaly | 0.5 | dist-tags.latest=15.3.6 but max published is 15.4.0-rc.1 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/hyodotdev/openiap.git' also claimed by 1 package(s) under different publishers: ['npm/expo-iap'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"hyodotdev"
],
"versions": 693
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-TpOF8XENd7sP00Tcw8ro/6+r0otHWBLh8ODiDnpf872XCOlgHjtDDr1tv8fJ5ERBrCFYrlwahb+c8GaIpDNYfw==",
"tarball": "https://registry.npmjs.org/react-native-iap/-/react-native-iap-15.3.6.tgz",
"unpackedSize": 3444152
},
"dist-tags": {
"latest": "15.3.6",
"next": "15.4.0-rc.3"
},
"latest_version": "15.3.6",
"maintainers": [
{
"email": "hyo@hyo.dev",
"name": "hyodotdev"
}
],
"num_versions": 700,
"repository": {
"directory": "libraries/react-native-iap",
"type": "git",
"url": "git+https://github.com/hyodotdev/openiap.git"
},
"scripts": {
"build:plugin": "tsc --build plugin",
"ci:check": "./scripts/ci-check.sh",
"clean": "rm -rf android/build node_modules/**/android/build lib nitrogen/generated",
"commitlint": "commitlint",
"example": "yarn workspace rn-iap-example",
"example:android": "yarn workspace rn-iap-example android",
"example:ios": "yarn workspace rn-iap-example ios",
"example:start": "yarn workspace rn-iap-example start",
"generate:icon": "cd docs/static/img && npx sharp-cli resize 32 32 --input icon.png --output favicon-32x32.png && npx sharp-cli resize 16 16 --input icon.png --output favicon-16x16.png && npx sharp-cli resize 192 192 --input icon.png --output android-chrome-192x192.png && npx sharp-cli resize 512 512 --input icon.png --output android-chrome-512x512.png && npx sharp-cli resize 180 180 --input icon.png --output apple-touch-icon.png && npx sharp-cli resize 1200 630 --input icon.png --output og-image.png && npx sharp-cli resize 150 150 --input icon.png --output favicon.png && npx sharp-cli --input favicon-32x32.png --output favicon.ico",
"generate:types": "node scripts/update-types.mjs",
"lint": "eslint --ext .ts,.tsx,.js,.jsx src",
"lint:ci": "yarn lint:tsc && yarn lint:eslint && yarn lint:prettier",
"lint:eslint": "eslint --fix 'src/**/*.{ts,tsx}' 'plugin/src/**/*.{ts,tsx}'",
"lint:prettier": "prettier --write \"**/*.{md,js,jsx,ts,tsx}\"",
"lint:tsc": "tsc -p tsconfig.json --noEmit --skipLibCheck",
"nitrogen": "node --stack-size=65536 node_modules/nitrogen/lib/index.js",
"precommit": "lint-staged",
"prepare": "npx tsx scripts/check-nitro-versions.ts && bob build && yarn nitrogen && yarn build:plugin",
"prepare:husky": "husky install",
"specs": "yarn nitrogen --logLevel=\"debug\"",
"test": "jest --coverage",
"test:all": "yarn test:library && yarn test:example",
"test:ci": "jest --maxWorkers=2 --coverage",
"test:ci:example": "yarn workspace rn-iap-example test --coverage",
"test:example": "yarn workspace rn-iap-example test --coverage",
"test:library": "jest --coverage",
"test:plugin": "jest plugin --coverage",
"typecheck": "yarn typecheck:lib",
"typecheck:lib": "yarn tsc --noEmit",
"verify:consumer-install": "node ../../scripts/verify-npm-consumer-install.mjs --package . --package-name react-native-iap --required openiap-versions.json --required lib/module/index.js --required lib/typescript/src/index.d.ts --required android/build.gradle --required NitroIap.podspec --required app.plugin.js --required nitro.json"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=15.3.6 but max published is 15.4.0-rc.1",
"shared_repo_different_publisher": "repo 'git+https://github.com/hyodotdev/openiap.git' also claimed by 1 package(s) under different publishers: ['npm/expo-iap']",
"typosquat": "combosquat of 'react'"
},
"time": {
"created": "2017-10-22T05:49:21.513Z",
"modified": "2026-07-05T15:21:08.481Z"
}
}