npm plotly.js-dist-min @3.7.0
score
0.6667
med
flagged
2026-07-21 12:33
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| typosquat | 1.0 | combosquat of 'plotly.js-dist' |
| dist_tag_anomaly | 0.5 | dist-tags.latest=3.7.0 but max published is 4.0.0-rc.0 |
| mass_publish_burst | 0.8 | publisher 'packages-team-plotly' pushed 20 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"chriddyp",
"bpostlethwaite",
"antrg",
"hammadtheone",
"bronsolo",
"t4rk",
"alexshoe",
"lconnors",
"ndrezner",
"farkites",
"alexcjohnson",
"emilykl-plotly",
"marthacryan",
"packages-team-plotly",
"etpinard"
],
"versions": 134
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-IRWNnBJZmKss3URDnicBK2nvt/VTSi/MD1GnUscAYFjwSuN6g/CTde5R1UC0RYtblehj8rkT4BL8r05e/c8j5Q==",
"tarball": "https://registry.npmjs.org/plotly.js-dist-min/-/plotly.js-dist-min-3.7.0.tgz",
"unpackedSize": 4854193
},
"dist-tags": {
"latest": "3.7.0",
"rc": "4.0.0-rc.0"
},
"latest_version": "3.7.0",
"maintainers": [
{
"email": "chris@plot.ly",
"name": "chriddyp"
},
{
"email": "post.ben.here@gmail.com",
"name": "bpostlethwaite"
},
{
"email": "antoine@plot.ly",
"name": "antrg"
},
{
"email": "hammadtheone@gmail.com",
"name": "hammadtheone"
},
{
"email": "chuck@plot.ly",
"name": "bronsolo"
},
{
"email": "t4rk@outlook.com",
"name": "t4rk"
},
{
"email": "alexshoe@gmail.com",
"name": "alexshoe"
},
{
"email": "liam@plotly.com",
"name": "lconnors"
},
{
"email": "nathan@drezner.xyz",
"name": "ndrezner"
},
{
"email": "mario.rodriguez@plot.ly",
"name": "farkites"
},
{
"email": "alex@plot.ly",
"name": "alexcjohnson"
},
{
"email": "emily@plot.ly",
"name": "emilykl-plotly"
},
{
"email": "martha.cryan326@gmail.com",
"name": "marthacryan"
},
{
"email": "packages@plot.ly",
"name": "packages-team-plotly"
},
{
"email": "code@etpinard.xyz",
"name": "etpinard"
}
],
"num_versions": 136,
"repository": {
"type": "git",
"url": "git+https://github.com/plotly/plotly.js.git"
},
"scripts": null,
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=3.7.0 but max published is 4.0.0-rc.0",
"mass_publish_burst": "publisher 'packages-team-plotly' pushed 20 packages in the last 15min on npm",
"typosquat": "combosquat of 'plotly.js-dist'"
},
"time": {
"created": "2019-10-07T17:39:02.713Z",
"modified": "2026-07-21T17:33:13.206Z"
}
}