npm @actual-app/sync-server @26.7.0
score
0.6667
med
flagged
2026-07-20 19:26
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=26.7.0 but max published is 26.8.0-nightly.20260703 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/actualbudget/actual.git' also claimed by 5 package(s) under different publishers: ['npm/@actual-app/cli', 'npm/@actual-app/api', 'npm/@actual-app/core'] ... |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['akahu'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"matissjanis",
"dolphish",
"joeljeremy",
"matt-fidd",
"actualbudget"
],
"versions": 402
}
Evidence (package doc at flag time)
{
"dependencies_count": 19,
"dist": {
"integrity": "sha512-EZArSszpL5UmP+QAAgQhr2RW54bru5C2WLaAlmP5/wUD1KrU4gh0P4DViwAZT5Ik4jvX/QrCVDD8ZH+/ZAV65A==",
"tarball": "https://registry.npmjs.org/@actual-app/sync-server/-/sync-server-26.7.0.tgz",
"unpackedSize": 750265
},
"dist-tags": {
"latest": "26.7.0",
"nightly": "26.8.0-nightly.20260719"
},
"latest_version": "26.7.0",
"maintainers": [
{
"email": "npmjs.org@mja.lv",
"name": "matissjanis"
},
{
"email": "julian.dominguezschatz@gmail.com",
"name": "dolphish"
},
{
"email": "joeljeremy.marquez@gmail.com",
"name": "joeljeremy"
},
{
"email": "npm@m.fiddaman.uk",
"name": "matt-fidd"
},
{
"email": "dev@actualbudget.org",
"name": "actualbudget"
}
],
"num_versions": 428,
"repository": {
"directory": "packages/sync-server",
"type": "git",
"url": "git+https://github.com/actualbudget/actual.git"
},
"scripts": {
"build": "vite build",
"db:downgrade": "yarn build && cross-env NODE_ENV=development node build/scripts/run-migrations.js down",
"db:migrate": "yarn build && cross-env NODE_ENV=development node build/scripts/run-migrations.js up",
"db:test-downgrade": "yarn build && cross-env NODE_ENV=test node build/scripts/run-migrations.js down",
"db:test-migrate": "yarn build && cross-env NODE_ENV=test node build/scripts/run-migrations.js up",
"disable-openid": "yarn build && node build/scripts/disable-openid.js",
"health-check": "yarn build && node build/scripts/health-check.js",
"reset-password": "yarn build && node build/scripts/reset-password.js",
"start": "yarn build && node build/app.js",
"start-monitor": "nodemon --exec 'yarn build && node build/app.js' --ignore './build/**/*' --ext 'ts,js' build/app.js",
"test": "NODE_ENV=test NODE_OPTIONS='--experimental-vm-modules --trace-warnings' vitest --run",
"typecheck": "tsgo -b && tsc-strict"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['akahu']",
"dist_tag_anomaly": "dist-tags.latest=26.7.0 but max published is 26.8.0-nightly.20260703",
"shared_repo_different_publisher": "repo 'git+https://github.com/actualbudget/actual.git' also claimed by 5 package(s) under different publishers: ['npm/@actual-app/cli', 'npm/@actual-app/api', 'npm/@actual-app/core'] ..."
},
"time": {
"created": "2025-04-13T21:26:03.336Z",
"modified": "2026-07-19T00:26:06.613Z"
}
}