npm @xmtp/wasm-bindings @1.10.0
score
0.7
high
flagged
2026-06-05 06:00
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=1.10.0 but max published is 2.0.0-nightly.20260604.90d0bfb |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/xmtp/libxmtp.git' also claimed by 1 package(s) under different publishers: ['npm/@xmtp/node-bindings'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"xmtp-eng-robot",
"galligan",
"nick-xmtp"
],
"versions": 145
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-RRZnD7XPsn9KiyLCJSSzRWJe7krO24NTQQpdS7KIoUTLY/8I2LqE07YwOMenXuUxtFqKnhBmy+3Y5NzQS6+ZLQ==",
"tarball": "https://registry.npmjs.org/@xmtp/wasm-bindings/-/wasm-bindings-1.10.0.tgz",
"unpackedSize": 11810381
},
"dist-tags": {
"latest": "1.10.0",
"nightly": "1.11.0-nightly.20260605.564252d",
"prerelease": "1.10.0-dev.ae5ffba"
},
"latest_version": "1.10.0",
"maintainers": [
{
"email": "eng+robot@xmtp.com",
"name": "xmtp-eng-robot"
},
{
"email": "matt.galligan@gmail.com",
"name": "galligan"
},
{
"email": "nicholas@xmtp.com",
"name": "nick-xmtp"
}
],
"num_versions": 145,
"repository": {
"directory": "bindings/wasm",
"type": "git",
"url": "git+https://github.com/xmtp/libxmtp.git"
},
"scripts": {
"build": "yarn clean && yarn build:web && yarn clean:release",
"build:macos": "yarn clean && yarn build:web:macos && yarn clean:release",
"build:test": "RUSTFLAGS=\"-Ctarget-feature=+bulk-memory,+mutable-globals --cfg getrandom_backend=\\\"wasm_js\\\"\" wasm-pack build --no-opt --target web --out-dir ./dist --no-pack --release -- --features test-utils",
"build:test:macos": "CC_wasm32_unknown_unknown=/opt/homebrew/opt/llvm/bin/clang RUSTFLAGS=\"-Ctarget-feature=+bulk-memory,+mutable-globals --cfg getrandom_backend=\\\"wasm_js\\\"\" wasm-pack build --no-opt --target web --out-dir ./dist --no-pack --release -- --features test-utils",
"build:web": "RUSTFLAGS=\"-Ctarget-feature=+bulk-memory,+mutable-globals --cfg getrandom_backend=\\\"wasm_js\\\"\" wasm-pack build --target web --out-dir ./dist --no-pack --release",
"build:web:macos": "CC_wasm32_unknown_unknown=/opt/homebrew/opt/llvm/bin/clang RUSTFLAGS=\"-Ctarget-feature=+bulk-memory,+mutable-globals --cfg getrandom_backend=\\\"wasm_js\\\"\" wasm-pack build --target web --out-dir ./dist --no-pack --release",
"check": "cargo check --target wasm32-unknown-unknown",
"check:macos": "CC_wasm32_unknown_unknown=/opt/homebrew/opt/llvm/bin/clang cargo check --target wasm32-unknown-unknown",
"clean": "rm -rf ./dist",
"clean:release": "rm ./dist/.gitignore",
"format": "prettier -w .",
"format:check": "prettier -c .",
"lint": "yarn lint:clippy && yarn lint:fmt",
"lint:clippy": "cargo clippy --locked --all-features --target wasm32-unknown-unknown --no-deps -- -D warnings",
"lint:clippy:macos": "CC_wasm32_unknown_unknown=/opt/homebrew/opt/llvm/bin/clang cargo clippy --locked --all-features --target wasm32-unknown-unknown --no-deps -- -D warnings",
"lint:fmt": "cargo fmt --check",
"lint:macos": "yarn lint:clippy:macos && yarn lint:fmt",
"prepublishOnly": "yarn build",
"test": "cargo test --target wasm32-unknown-unknown",
"test:integration": "yarn build:test && vitest run",
"test:integration:macos": "CC_wasm32_unknown_unknown=/opt/homebrew/opt/llvm/bin/clang yarn build:test:macos && vitest run",
"test:macos": "CC_wasm32_unknown_unknown=/opt/homebrew/opt/llvm/bin/clang cargo test --target wasm32-unknown-unknown",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=1.10.0 but max published is 2.0.0-nightly.20260604.90d0bfb",
"shared_repo_different_publisher": "repo 'git+https://github.com/xmtp/libxmtp.git' also claimed by 1 package(s) under different publishers: ['npm/@xmtp/node-bindings']"
},
"time": {
"created": "2024-10-28T17:14:46.942Z",
"modified": "2026-06-05T07:35:17.823Z"
}
}