npm @expo/env @2.4.2
score
0.85
high
flagged
2026-07-20 09:40
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| mass_publish_burst | 0.8 | publisher 'alanhughes' pushed 130 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/expo/expo.git' also claimed by 10 package(s) under different publishers: ['npm/@amazon-devices/expo-sqlite', 'npm/@amazon-devices/expo-linear-gradient', 'npm/@amazon-devices/expo-gl'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"ide",
"brentvatne",
"expoadmin",
"exponent",
"bycedric",
"kudochien",
"alanhughes",
"tsapeta",
"expo-bot",
"philpl",
"wschurman"
],
"versions": 176
}
Evidence (package doc at flag time)
{
"dependencies_count": 3,
"dist": {
"integrity": "sha512-28pqaEqwnmLduZ00Pq9HkSzE5wbj1MTwp5/n8nm8rD8MCjR9eUnVOwmNksPI3Be2ReAPO/DbPn1puy0mvoocsQ==",
"tarball": "https://registry.npmjs.org/@expo/env/-/env-2.4.2.tgz",
"unpackedSize": 80176
},
"dist-tags": {
"canary": "2.3.2-canary-20260718-7cbcda5",
"canary-sdk-55": "2.1.2-canary-20260429-a5e59cf",
"canary-sdk-56": "2.3.1-canary-20260701-9100865",
"latest": "2.4.2",
"next": "2.4.2",
"sdk-50": "0.2.2",
"sdk-51": "0.3.0",
"sdk-54": "2.0.12",
"sdk-55": "2.1.3",
"sdk-56": "2.3.1"
},
"latest_version": "2.4.2",
"maintainers": [
{
"email": "ide+npm@jameside.com",
"name": "ide"
},
{
"email": "brentvatne@gmail.com",
"name": "brentvatne"
},
{
"email": "support@expo.io",
"name": "expoadmin"
},
{
"email": "exponent.team@gmail.com",
"name": "exponent"
},
{
"email": "me@bycedric.com",
"name": "bycedric"
},
{
"email": "ckchien@gmail.com",
"name": "kudochien"
},
{
"email": "hughesno1@gmail.com",
"name": "alanhughes"
},
{
"email": "npm@tsapeta.com",
"name": "tsapeta"
},
{
"email": "brent+expobotnpm@expo.io",
"name": "expo-bot"
},
{
"email": "phil@kitten.sh",
"name": "philpl"
},
{
"email": "wschurman@gmail.com",
"name": "wschurman"
}
],
"num_versions": 188,
"repository": {
"directory": "packages/@expo/env",
"type": "git",
"url": "git+https://github.com/expo/expo.git"
},
"scripts": {
"build": "tsc --emitDeclarationOnly && babel src --out-dir build --extensions \".ts\" --source-maps --ignore \"src/**/__mocks__/*\",\"src/**/__tests__/*\"",
"clean": "expo-module clean",
"lint": "expo-module lint",
"test": "expo-module test",
"typecheck": "expo-module typecheck"
},
"signal_details": {
"mass_publish_burst": "publisher 'alanhughes' pushed 130 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/expo/expo.git' also claimed by 10 package(s) under different publishers: ['npm/@amazon-devices/expo-sqlite', 'npm/@amazon-devices/expo-linear-gradient', 'npm/@amazon-devices/expo-gl'] ..."
},
"time": {
"created": "2023-04-06T01:40:52.666Z",
"modified": "2026-07-18T16:19:23.084Z"
}
}