BEACON

← candidates

npm @firebase/auth @1.13.3

score
0.85 high
flagged 2026-07-21 13:21
signals by category
topology 2

maintainers added: —

package profile →

Signals fired

signalweightrationale
topology
mass_publish_burst 0.8 publisher 'google-wombot' pushed 18 packages in the last 15min on npm
shared_repo_different_publisher 0.9 repo 'git+https://github.com/firebase/firebase-js-sdk.git' also claimed by 9 package(s) under different publishers: ['npm/@unstoppabledomains/firebase-auth', 'npm/@depup/firebase__analytics-compat', 'npm/@depup/firebase__app-check'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "firebase-ops",
    "feiyang.chen",
    "google-wombot",
    "chholland"
  ],
  "versions": 3761
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-bqiq4uubDN2YyQkdvSWPQeJyXAv2O76ImF41En9b6UhV5JuBVYDoHYrrrE3NzIuGkpFMKagfhMRP4Vz6t+yQSQ==",
    "tarball": "https://registry.npmjs.org/@firebase/auth/-/auth-1.13.3.tgz",
    "unpackedSize": 15492581
  },
  "dist-tags": {
    "BundlePrerelease": "0.15.3-BundlePrerelease.b662f8c0a",
    "auth-redirect-credentials": "1.10.0-auth-redirect-credentials.b424e5897",
    "beta": "0.0.900-exp.8b4d7550f",
    "caching-fdc": "1.11.0-caching-fdc.9f17eac6e",
    "canary": "1.12.2-canary.bfb9accdc",
    "dataconnect-preview": "1.7.5-dataconnect-preview.d986d4bf2",
    "eap-ai-hybridinference": "1.10.2-eap-ai-hybridinference.58d92df33",
    "eap-auth-emulator": "0.14.9-eap-auth-emulator.df41ee388",
    "eap-crashlytics": "1.13.2-eap-crashlytics.558ee841d",
    "eap-firestore-backfiller": "1.7.4-eap-firestore-backfiller.87babf60c",
    "eap-firestore-debug": "0.15.2-1.0.0-eap-firestore-debug.9c6096f43",
    "eap-firestore-pipelines": "1.11.1-eap-firestore-pipelines.2.e4cdd2e06",
    "eap-storage-emulator": "0.16.4-eap-storage-emulator.ed256f582",
    "eap-vertexai-hybgoog": "1.10.0-eap-vertexai-hybgoog.31261ca31",
    "eap-vertexai-hybridinference": "1.10.0-eap-vertexai-hybridinference.e83974308",
    "exp": "0.0.900-exp.f6733b13b",
    "exp-types-exploration": "0.16.8-8.9.1-exp-types-exploration.635c9e3fd",
    "firebase-studio-sdk-integration": "1.11.0-firebase-studio-sdk-integration.556d1bed2",
    "firestore-bundles-alpha": "0.14.9-alpha.96ae6a5fe",
    "latest": "1.13.3",
    "longpoll": "0.16.1-longpoll.66863f547",
    "next": "1.13.3-20260616175646",
    "passkey-preview": "1.7.1-passkey-preview.103ead202",
    "pr5646": "0.18.3-pr5646.2abc5e854",
    "ssl-check": "1.10.0-ssl-check.4f23f3343",
    "vertex-preview": "1.7.0-vertex-preview.8b70fc586",
    "vertexai-preview": "1.7.9-vertexai-preview.6b035b7d3"
  },
  "latest_version": "1.13.3",
  "maintainers": [
    {
      "email": "operations+plainlogo@firebase.com",
      "name": "firebase-ops"
    },
    {
      "email": "feiyang.chen1@gmail.com",
      "name": "feiyang.chen"
    },
    {
      "email": "node-team-npm+wombot@google.com",
      "name": "google-wombot"
    },
    {
      "email": "chholland@google.com",
      "name": "chholland"
    }
  ],
  "num_versions": 3761,
  "repository": {
    "directory": "packages/auth",
    "type": "git",
    "url": "git+https://github.com/firebase/firebase-js-sdk.git"
  },
  "scripts": {
    "api-report": "api-extractor run --local --verbose --config ./api-extractor.json && api-extractor run --local --verbose --config ./web-extension/api-extractor.json && api-extractor run --local --verbose --config ./cordova/api-extractor.json",
    "build": "rollup -c && yarn api-report",
    "build:deps": "lerna run --scope @firebase/auth --include-dependencies build",
    "build:doc": "yarn build && yarn doc",
    "build:release": "yarn build && yarn typings:public",
    "build:scripts": "tsc -moduleResolution node --module commonjs scripts/*.ts && ls scripts/*.js | xargs -I % sh -c 'terser %  -o %'",
    "dev": "rollup -c -w",
    "doc": "api-documenter markdown --input temp --output docs",
    "lint": "eslint -c .eslintrc.js '**/*.ts' --ignore-path '../../.gitignore'",
    "lint:fix": "eslint --fix -c .eslintrc.js '**/*.ts' --ignore-path '../../.gitignore'",
    "test": "run-p --npm-path npm lint test:all",
    "test:all": "run-p --npm-path npm test:browser:unit test:node:unit test:integration test:browser:integration:prodbackend",
    "test:browser": "karma start --local",
    "test:browser:debug": "karma start --auto-watch",
    "test:browser:integration": "karma start --integration",
    "test:browser:integration:local": "karma start --integration --local",
    "test:browser:integration:prodbackend": "karma start --integration --prodbackend",
    "test:browser:unit": "karma start --unit",
    "test:browser:unit:debug": "karma start --auto-watch --unit",
    "test:ci": "node ../../scripts/run_tests_in_ci.js -s test:all",
    "test:cordova": "karma start --cordova",
    "test:cordova:debug": "karma start --auto-watch --cordova",
    "test:integration": "firebase emulators:exec --project emulatedproject --only auth \"run-s --npm-path npm test:browser:integration:local test:node:integration:local test:webdriver\"",
    "test:integration:local": "run-s --npm-path npm test:node:integration:local test:browser:integration:local test:webdriver",
    "test:node": "run-s --npm-path npm test:node:unit test:node:integration:local",
    "test:node:integration": "ts-node -O '{\"module\": \"commonjs\", \"target\": \"es6\"}' scripts/run_node_tests.ts --integration",
    "test:node:integration:local": "ts-node -O '{\"module\": \"commonjs\", \"target\": \"es6\"}' scripts/run_node_tests.ts --integration --local",
    "test:node:unit": "ts-node -O '{\"module\": \"commonjs\", \"target\": \"es6\"}' scripts/run_node_tests.ts",
    "test:webdriver": "rollup -c test/integration/webdriver/static/rollup.config.js && ts-node -O '{\"module\": \"commonjs\", \"target\": \"es6\"}' scripts/run_node_tests.ts --webdriver",
    "trusted-type-check": "tsec -p tsconfig.json --noEmit",
    "typings:public": "node ../../scripts/build/use_typings.js ./dist/auth-public.d.ts"
  },
  "signal_details": {
    "mass_publish_burst": "publisher 'google-wombot' pushed 18 packages in the last 15min on npm",
    "shared_repo_different_publisher": "repo 'git+https://github.com/firebase/firebase-js-sdk.git' also claimed by 9 package(s) under different publishers: ['npm/@unstoppabledomains/firebase-auth', 'npm/@depup/firebase__analytics-compat', 'npm/@depup/firebase__app-check'] ..."
  },
  "time": {
    "created": "2017-10-11T23:22:09.380Z",
    "modified": "2026-06-16T18:52:03.494Z"
  }
}