npm @ledgerhq/hw-app-eth @7.8.9
score
0.65
med
flagged
2026-07-21 22:14
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=7.8.9 but max published is 7.8.10-nightly.20260721030453 |
| mass_publish_burst | 0.8 | publisher 'ldg-github-ci' pushed 37 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"phenry-ledger",
"sergii-shkolin",
"gbrahm-ledger",
"thomas.coudray",
"ldg-github-ci",
"vbouzon",
"ledger-releaser"
],
"versions": 1167
}
Evidence (package doc at flag time)
{
"dependencies_count": 13,
"dist": {
"integrity": "sha512-VuVjqL6nDmt+E0xkOuYqeiuftMnS7clj/xCEn+ASEAp6UxGGHLom3MOUVCGaLcFDfUwIjD08rH33aBszg7vIlQ==",
"tarball": "https://registry.npmjs.org/@ledgerhq/hw-app-eth/-/hw-app-eth-7.8.9.tgz",
"unpackedSize": 2437548
},
"dist-tags": {
"FTS": "6.27.1-fts.6",
"alpha": "6.0.0-alpha.7",
"arm-builds": "6.29.5-arm-builds.0",
"bsc": "6.2.0-bsc.5",
"canary": "6.25.1-alpha.3",
"custom-exchange": "6.35.2-custom-exchange.0",
"fix-build-number-pre": "6.41.0-fix-build-number-pre.0",
"hotfix": "6.40.1-hotfix.0",
"ios-build-number": "6.41.0-ios-build-number.0",
"ios-build-number-fix": "6.41.0-ios-build-number-fix.0",
"ios-builds-improvement": "6.32.0-ios-builds-improvement.0",
"latest": "7.8.9",
"monorepo": "6.26.1-monorepo.4",
"new-wc": "6.35.5-new-wc.0",
"new-wc-test": "6.35.5-new-wc-test.0",
"next": "6.45.8-next.0",
"next-new-cdn": "6.41.0-next-new-cdn.0",
"nightly": "7.8.10-nightly.20260722030527",
"notarizer": "6.33.6-notarizer.0",
"prerelease-test": "6.30.5-prerelease-test.0",
"protect": "6.30.5-protect.0",
"proto-test": "6.33.3-proto-test.0",
"rc": "6.0.0-rc.0",
"recover-beta": "6.33.0-recover-beta.0",
"recover-simu": "6.32.2-recover-simu.0",
"recover-staging": "6.32.2-recover-staging.0",
"spl-test": "6.40.4-spl-test.0",
"spl-tokens-test": "6.41.0-spl-tokens-test.0",
"start-exchange": "6.35.4-start-exchange.0",
"tag-word": "6.34.9-tag-word.0",
"taproot": "6.10.0-taproot.0",
"ts-llm": "6.30.0-ts-llm.0",
"typescript": "6.0.1-typescript.0",
"uglifyfi": "5.48.1-uglify.0",
"v6.0.0-typescript.2": "6.0.0-typescript.2",
"v6.0.0-typescript.3": "6.0.0-typescript.3",
"wc-test": "6.35.5-wc-test.0",
"windows-certificate": "6.37.0-windows-certificate.0",
"yolo": "6.29.2-yolo.0"
},
"latest_version": "7.8.9",
"maintainers": [
{
"email": "pascal.henry@ledger.fr",
"name": "phenry-ledger"
},
{
"email": "sergii.shkolin-ext@ledger.fr",
"name": "sergii-shkolin"
},
{
"email": "gandalf.brahm@ledger.fr",
"name": "gbrahm-ledger"
},
{
"email": "thomas.coudray@ledger.fr",
"name": "thomas.coudray"
},
{
"email": "infra-purchasing@ledger.fr",
"name": "ldg-github-ci"
},
{
"email": "vincent.bouzon@live.fr",
"name": "vbouzon"
},
{
"email": "team-secops+ledger-releaser-npmjs@ledger.fr",
"name": "ledger-releaser"
}
],
"num_versions": 1169,
"repository": {
"type": "git",
"url": "git+https://github.com/LedgerHQ/ledger-live.git"
},
"scripts": {
"build": "tsc --project tsconfig.build.json && tsc --project tsconfig.build.json -m esnext --moduleResolution bundler --outDir lib-es",
"clean": "rimraf lib lib-es",
"coverage": "jest --coverage --passWithNoTests",
"doc": "documentation readme src/** --section=API --pe ts --re ts --re d.ts",
"lint": "oxlint ./src",
"lint:fix": "pnpm lint --fix",
"prewatch": "pnpm build",
"test": "jest",
"unimported": "unimported",
"watch": "tsc --watch --project tsconfig.build.json",
"watch:es": "tsc --watch --project tsconfig.build.json -m esnext --moduleResolution bundler --outDir lib-es"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=7.8.9 but max published is 7.8.10-nightly.20260721030453",
"mass_publish_burst": "publisher 'ldg-github-ci' pushed 37 packages in the last 15min on npm"
},
"time": {
"created": "2018-01-11T13:58:48.312Z",
"modified": "2026-07-22T03:14:36.931Z"
}
}