npm @uniformdev/canvas @20.72.3
score
0.5333
med
flagged
2026-07-22 03:55
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| dist_tag_anomaly | 0.5 | dist-tags.latest=20.72.3 but max published is 20.72.4-alpha.6 |
| mass_publish_burst | 0.8 | publisher 'originalexe' pushed 11 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"drolexan",
"alenpelin",
"kamsar",
"adamluniform",
"originalexe",
"m1r1k",
"jakub-uniform",
"serhiiouniformdev"
],
"versions": 1072
}
Evidence (package doc at flag time)
{
"dependencies_count": 7,
"dist": {
"integrity": "sha512-m3YSVHa75ScORCyiSv2Q4Sm3CcGwqCBCVE8KOtg0M/Uvbv3vFy4BoytZV8P/f6wvDxF2XR9wJ6nTOJJdI/nI5Q==",
"tarball": "https://registry.npmjs.org/@uniformdev/canvas/-/canvas-20.72.3.tgz",
"unpackedSize": 1879897
},
"dist-tags": {
"canary": "20.72.4-alpha.6",
"latest": "20.72.3"
},
"latest_version": "20.72.3",
"maintainers": [
{
"email": "alexs@uniform.dev",
"name": "drolexan"
},
{
"email": "alen.pelin@gmail.com",
"name": "alenpelin"
},
{
"email": "kamsar@gmail.com",
"name": "kamsar"
},
{
"email": "adaml@uniform.dev",
"name": "adamluniform"
},
{
"email": "antesepic@protonmail.com",
"name": "originalexe"
},
{
"email": "artemm@uniform.dev",
"name": "m1r1k"
},
{
"email": "jakube@uniform.dev",
"name": "jakub-uniform"
},
{
"email": "serhiio@uniform.dev",
"name": "serhiiouniformdev"
}
],
"num_versions": 1072,
"repository": null,
"scripts": {
"apidocs-extract": "api-extractor run --local",
"build": "run-s update-openapi create-version build:ts",
"build:ts": "tsup",
"clean": "rimraf dist",
"create-version": "tsx ./scripts/create-version-export.cts",
"dev": "run-s update-openapi create-version dev:ts",
"dev:ts": "tsup --watch",
"format": "prettier --write \"src/**/*.{js,ts,tsx}\"",
"test": "run-s create-version test:run",
"test:run": "vitest run",
"update-openapi": "tsx ./scripts/update-openapi.cts"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=20.72.3 but max published is 20.72.4-alpha.6",
"mass_publish_burst": "publisher 'originalexe' pushed 11 packages in the last 15min on npm",
"no_repo": "package.json has no repository field"
},
"time": {
"created": "2021-09-27T20:46:59.782Z",
"modified": "2026-07-22T07:55:22.458Z"
}
}