npm expo-checkbox @57.0.0
score
0.8
high
flagged
2026-07-20 09:36
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| typosquat | 1.0 | combosquat of 'ckbox' |
| mass_publish_burst | 0.8 | publisher 'alanhughes' pushed 85 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/expo/expo.git' also claimed by 9 package(s) under different publishers: ['npm/@amazon-devices/expo-linear-gradient', 'npm/@amazon-devices/expo-gl', 'npm/@amazon-devices/expo-crypto'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"ide",
"brentvatne",
"expoadmin",
"exponent",
"bycedric",
"kudochien",
"alanhughes",
"tsapeta",
"expo-bot",
"philpl",
"wschurman"
],
"versions": 177
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-niJeYxodyu7R6HhxZ8eBzj2K+iuvBs5A20bXgOE/Dxs7rht3oAq2crEjpDModFkAf1aHr7xhDUXxxB4G4coDgw==",
"tarball": "https://registry.npmjs.org/expo-checkbox/-/expo-checkbox-57.0.0.tgz",
"unpackedSize": 52006
},
"dist-tags": {
"canary": "57.0.0-canary-20260720-b6d63bc",
"canary-sdk-55": "55.0.4-canary-20260429-a5e59cf",
"canary-sdk-56": "56.0.2-canary-20260701-9100865",
"latest": "57.0.0",
"next": "57.0.0",
"sdk-50": "2.7.0",
"sdk-51": "3.0.0"
},
"latest_version": "57.0.0",
"maintainers": [
{
"email": "ide+npm@jameside.com",
"name": "ide"
},
{
"email": "brentvatne@gmail.com",
"name": "brentvatne"
},
{
"email": "support@expo.io",
"name": "expoadmin"
},
{
"email": "exponent.team@gmail.com",
"name": "exponent"
},
{
"email": "me@bycedric.com",
"name": "bycedric"
},
{
"email": "ckchien@gmail.com",
"name": "kudochien"
},
{
"email": "hughesno1@gmail.com",
"name": "alanhughes"
},
{
"email": "npm@tsapeta.com",
"name": "tsapeta"
},
{
"email": "brent+expobotnpm@expo.io",
"name": "expo-bot"
},
{
"email": "phil@kitten.sh",
"name": "philpl"
},
{
"email": "wschurman@gmail.com",
"name": "wschurman"
}
],
"num_versions": 185,
"repository": {
"directory": "packages/expo-checkbox",
"type": "git",
"url": "git+https://github.com/expo/expo.git"
},
"scripts": {
"build": "expo-module build",
"clean": "expo-module clean",
"expo-module": "expo-module",
"lint": "expo-module lint",
"test": "expo-module test"
},
"signal_details": {
"mass_publish_burst": "publisher 'alanhughes' pushed 85 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/expo/expo.git' also claimed by 9 package(s) under different publishers: ['npm/@amazon-devices/expo-linear-gradient', 'npm/@amazon-devices/expo-gl', 'npm/@amazon-devices/expo-crypto'] ...",
"typosquat": "combosquat of 'ckbox'"
},
"time": {
"created": "2020-12-09T03:30:34.738Z",
"modified": "2026-07-20T14:36:10.945Z"
}
}