npm vercel @56.4.0
score
0.75
high
flagged
2026-07-20 09:56
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/vercel/vercel.git' also claimed by 10 package(s) under different publishers: ['npm/@vercel/redwood', 'npm/@vercel/aws', 'npm/@vercel/build-utils'] ... |
| dependency_added_unknown | 0.6 | 3 new non-watchlisted dep(s): ['@vercel/container', 'jsonc-parser', 'undici'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"matheuss",
"rauchg",
"matt.straka",
"vercel-release-bot",
"zeit-bot"
],
"versions": 1004
}
Evidence (package doc at flag time)
{
"dependencies_count": 35,
"dist": {
"integrity": "sha512-kBNkguWeUva8l1eD0CkTH8l4yiGW1iymJcWG93YDMmZELJ9wha96eeaZWJKxUiy+wBcza6b+bQ1ympd7wNQPkA==",
"tarball": "https://registry.npmjs.org/vercel/-/vercel-56.4.0.tgz",
"unpackedSize": 9647059
},
"dist-tags": {
"canary": "51.7.0",
"latest": "56.4.0"
},
"latest_version": "56.4.0",
"maintainers": [
{
"email": "matheus.frndes@gmail.com",
"name": "matheuss"
},
{
"email": "rauchg@gmail.com",
"name": "rauchg"
},
{
"email": "matt.j.straka@gmail.com",
"name": "matt.straka"
},
{
"email": "infra+release@vercel.com",
"name": "vercel-release-bot"
},
{
"email": "team@zeit.co",
"name": "zeit-bot"
}
],
"num_versions": 1033,
"repository": {
"directory": "packages/cli",
"type": "git",
"url": "git+https://github.com/vercel/vercel.git"
},
"scripts": {
"build": "node scripts/build.mjs",
"build-binary": "pnpm --filter vercel... build && node scripts/build-binary.mjs",
"build-binary-node": "node scripts/build-binary-node.mjs",
"build-binary:host": "pnpm --filter vercel... build && node scripts/build-binary.mjs --target host --output ./dist-bin/vercel",
"coverage": "codecov",
"dev": "echo \"'pnpm dev [command]' has been removed. Use 'pnpm vercel [command]' instead.\" && exit 1",
"smoke-binary": "node scripts/smoke-test-binary.mjs",
"test": "vitest run --config ./vitest.config.mts",
"test-dev": "pnpm test test/dev/",
"test-e2e-node-all-versions": "rimraf test/fixtures/integration && pnpm test test/integration-1.test.ts test/integration-2.test.ts test/integration-3.test.ts test/integration-link-env-pull.test.ts",
"test:evals": "tsx evals/run.ts",
"test:evals:dry": "tsx evals/run.ts --dry",
"test:evals:local-fixture": "tsx evals/run.ts --local-fixture",
"test:evals:smoke": "tsx evals/run.ts smoke --smoke",
"type-check": "tsc --noEmit",
"vc": "pnpm vercel",
"vercel": "pnpm build && node ./dist/vc.js",
"vitest-run": "node scripts/vitest-run.mjs",
"vitest-unit": "glob --absolute 'test/unit/**/*.test.ts'"
},
"signal_details": {
"dependency_added_unknown": "3 new non-watchlisted dep(s): ['@vercel/container', 'jsonc-parser', 'undici']",
"shared_repo_different_publisher": "repo 'git+https://github.com/vercel/vercel.git' also claimed by 10 package(s) under different publishers: ['npm/@vercel/redwood', 'npm/@vercel/aws', 'npm/@vercel/build-utils'] ..."
},
"time": {
"created": "2020-03-03T22:21:08.947Z",
"modified": "2026-07-20T14:56:04.431Z"
}
}