npm @payloadcms/sdk @3.86.0
score
0.65
med
flagged
2026-07-21 13:17
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=3.86.0 but max published is 4.0.0-internal.5b1e7cd |
| mass_publish_burst | 0.8 | publisher 'elliotpayload' pushed 25 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"payloadjs",
"german.jablo",
"elliotpayload",
"danribbens",
"seanpayload",
"jmikrut",
"jacobsfletch",
"jesschow",
"alessiogr",
"patrikkozak",
"jarrodmflesch"
],
"versions": 486
}
Evidence (package doc at flag time)
{
"dependencies_count": 3,
"dist": {
"integrity": "sha512-UPAXQB0+evS496uB+YFyyFKX0HZvsL4EUckKG9qGMvTl1DoFo5ve7Kvzr1V8dl+rcEYhmA1XIzZBnwIQ4+q04A==",
"tarball": "https://registry.npmjs.org/@payloadcms/sdk/-/sdk-3.86.0.tgz",
"unpackedSize": 185904
},
"dist-tags": {
"beta": "0.0.1-beta.0",
"canary": "4.0.0-canary.14",
"internal": "4.0.0-internal.e7d4ebc",
"internal-debug": "3.81.0-internal-debug.1a0f4d0",
"latest": "3.86.0"
},
"latest_version": "3.86.0",
"maintainers": [
{
"email": "dev@payloadcms.com",
"name": "payloadjs"
},
{
"email": "german.jablo@gmail.com",
"name": "german.jablo"
},
{
"email": "elliot@payloadcms.com",
"name": "elliotpayload"
},
{
"email": "dan.ribbens@gmail.com",
"name": "danribbens"
},
{
"email": "sean@payloadcms.com",
"name": "seanpayload"
},
{
"email": "james@payloadcms.com",
"name": "jmikrut"
},
{
"email": "jacobsfletch@gmail.com",
"name": "jacobsfletch"
},
{
"email": "jessica@payloadcms.com",
"name": "jesschow"
},
{
"email": "npm@gravili.net",
"name": "alessiogr"
},
{
"email": "patrik@payloadcms.com",
"name": "patrikkozak"
},
{
"email": "jarrodmflesch@gmail.com",
"name": "jarrodmflesch"
}
],
"num_versions": 487,
"repository": {
"directory": "packages/sdk",
"type": "git",
"url": "https://github.com/payloadcms/payload.git"
},
"scripts": {
"build": "pnpm copyfiles && pnpm build:types && pnpm build:swc",
"build:debug": "pnpm build",
"build:swc": "swc ./src -d ./dist --config-file .swcrc --strip-leading-paths",
"build:types": "tsc --emitDeclarationOnly --outDir dist",
"clean": "rimraf {dist,*.tsbuildinfo}",
"copyfiles": "copyfiles -u 1 \"src/**/*.{html,css,scss,ttf,woff,woff2,eot,svg,jpg,png,json}\" dist/",
"lint": "eslint .",
"lint:fix": "eslint . --fix"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=3.86.0 but max published is 4.0.0-internal.5b1e7cd",
"mass_publish_burst": "publisher 'elliotpayload' pushed 25 packages in the last 15min on npm"
},
"time": {
"created": "2025-09-30T12:53:30.342Z",
"modified": "2026-07-21T17:16:04.585Z"
}
}