BEACON

← candidates

npm @n8n/workflow-sdk @0.23.2

score
0.672 med
flagged 2026-07-21 02:30
signals by category
identity 1 topology 3

maintainers added: n8n-charliekolb

package profile →

Signals fired

signalweightrationale
identity
maintainer_churn 1.0 added: ['n8n-charliekolb']
topology
dist_tag_anomaly 0.5 dist-tags.latest=0.23.2 but max published is 0.25.0
shared_repo_different_publisher 0.9 repo 'git+https://github.com/n8n-io/n8n.git' also claimed by 10 package(s) under different publishers: ['npm/@n8n/config', 'npm/@n8n/engine', 'npm/@n8n/eslint-plugin-community-nodes'] ...
dependency_added_unknown 0.6 2 new non-watchlisted dep(s): ['@n8n/utils', 'lodash']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "cornelius_n8n_io",
    "n8n-matsuuu",
    "tomin8n",
    "jan_n8n_io"
  ],
  "versions": 44
}

Evidence (package doc at flag time)

{
  "dependencies_count": 7,
  "dist": {
    "integrity": "sha512-GL/f0r2RUdSVXoeyXpToB1yaAnZtD7xSxPgelD3rAp0IksJtyXJ4Fv0/6bLG+K9QYiy5smIUuSIg7pd3s5mXJw==",
    "tarball": "https://registry.npmjs.org/@n8n/workflow-sdk/-/workflow-sdk-0.23.2.tgz",
    "unpackedSize": 2105328
  },
  "dist-tags": {
    "beta": "0.25.0",
    "latest": "0.23.2",
    "stable": "0.23.2"
  },
  "latest_version": "0.23.2",
  "maintainers": [
    {
      "email": "cornelius@n8n.io",
      "name": "cornelius_n8n_io"
    },
    {
      "email": "matias.huhta@n8n.io",
      "name": "n8n-matsuuu"
    },
    {
      "email": "tomi+npm@n8n.io",
      "name": "tomin8n"
    },
    {
      "email": "jan@n8n.io",
      "name": "jan_n8n_io"
    },
    {
      "email": "charlie@n8n.io",
      "name": "n8n-charliekolb"
    }
  ],
  "num_versions": 62,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/n8n-io/n8n.git"
  },
  "scripts": {
    "build": "tsc -p tsconfig.build.json",
    "build:unchecked": "tsc -p tsconfig.build.json --noCheck",
    "clean": "rimraf dist .turbo",
    "code-to-json": "npx tsx src/cli/index.ts code-to-json",
    "create-workflows-zip": "npx tsx scripts/create-workflows-zip.ts",
    "dev": "pnpm watch",
    "extract-workflows": "npx tsx scripts/extract-workflows.ts",
    "fetch-workflows": "npx tsx scripts/fetch-test-workflows.ts",
    "format": "biome format --write .",
    "format:check": "biome ci .",
    "generate-types": "npx tsx src/generate-types/generate-types.ts",
    "json-to-code": "npx tsx src/cli/index.ts json-to-code",
    "lint": "eslint . --quiet",
    "lint:fix": "eslint . --fix",
    "test": "vitest run",
    "test:dev": "vitest --silent=false",
    "test:unit": "vitest run",
    "typecheck": "tsc --noEmit",
    "watch": "tsc -p tsconfig.build.json --watch"
  },
  "signal_details": {
    "dependency_added_unknown": "2 new non-watchlisted dep(s): ['@n8n/utils', 'lodash']",
    "dist_tag_anomaly": "dist-tags.latest=0.23.2 but max published is 0.25.0",
    "maintainer_churn": "added: ['n8n-charliekolb']",
    "shared_repo_different_publisher": "repo 'git+https://github.com/n8n-io/n8n.git' also claimed by 10 package(s) under different publishers: ['npm/@n8n/config', 'npm/@n8n/engine', 'npm/@n8n/eslint-plugin-community-nodes'] ..."
  },
  "time": {
    "created": "2026-02-16T17:47:07.565Z",
    "modified": "2026-07-21T07:30:22.669Z"
  }
}