npm @metamask/transaction-pay-controller @26.0.0
score
0.75
high
flagged
2026-07-23 09:00
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/MetaMask/core.git' also claimed by 10 package(s) under different publishers: ['npm/@metamask/client-utils', 'npm/@metamask/wallet', 'npm/@metamask/logging-controller'] ... |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['@metamask/sentinel-api-service'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"kumavis",
"frederikbolding",
"metamaskbot",
"gudahtt",
"mrten",
"mcmire",
"naugtur"
],
"versions": 117
}
Evidence (package doc at flag time)
{
"dependencies_count": 21,
"dist": {
"integrity": "sha512-ga3go8HcbBRkEkwDw6cOMPefJvDqItQWl2iF/o/BIgn9CAuFzDVGCG/++u1oPApA5kpWlRXlfWW7GhR/nyikzA==",
"tarball": "https://registry.npmjs.org/@metamask/transaction-pay-controller/-/transaction-pay-controller-26.0.0.tgz",
"unpackedSize": 3257226
},
"dist-tags": {
"latest": "26.0.0"
},
"latest_version": "26.0.0",
"maintainers": [
{
"email": "aaron@kumavis.me",
"name": "kumavis"
},
{
"email": "frederik.bolding@consensys.net",
"name": "frederikbolding"
},
{
"email": "metamask-npm@consensys.net",
"name": "metamaskbot"
},
{
"email": "markjstacey@gmail.com",
"name": "gudahtt"
},
{
"email": "maarten@zuidhoorn.com",
"name": "mrten"
},
{
"email": "elliot.winkler@gmail.com",
"name": "mcmire"
},
{
"email": "naugtur@gmail.com",
"name": "naugtur"
}
],
"num_versions": 118,
"repository": {
"type": "git",
"url": "https://github.com/MetaMask/core.git"
},
"scripts": {
"build": "ts-bridge --project tsconfig.build.json --verbose --clean --no-references",
"build:all": "ts-bridge --project tsconfig.build.json --verbose --clean",
"build:docs": "typedoc",
"changelog:update": "../../scripts/update-changelog.sh @metamask/transaction-pay-controller",
"changelog:validate": "../../scripts/validate-changelog.sh @metamask/transaction-pay-controller",
"lint:tsconfigs": "tsx ../../scripts/lint-tsconfigs/lint-tsconfigs.mts",
"lint:tsconfigs:fix": "tsx ../../scripts/lint-tsconfigs/lint-tsconfigs.mts --fix",
"messenger-action-types:check": "tsx ../../packages/messenger-cli/src/cli.ts --formatter oxfmt --esm --check",
"messenger-action-types:generate": "tsx ../../packages/messenger-cli/src/cli.ts --formatter oxfmt --esm --generate",
"prepare-manifest:preview": "../../scripts/prepare-preview-manifest.sh",
"since-latest-release": "../../scripts/since-latest-release.sh",
"test": "NODE_OPTIONS=--experimental-vm-modules jest --reporters=jest-silent-reporter",
"test:clean": "NODE_OPTIONS=--experimental-vm-modules jest --clearCache",
"test:verbose": "NODE_OPTIONS=--experimental-vm-modules jest --verbose",
"test:watch": "NODE_OPTIONS=--experimental-vm-modules jest --watch"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['@metamask/sentinel-api-service']",
"shared_repo_different_publisher": "repo 'https://github.com/MetaMask/core.git' also claimed by 10 package(s) under different publishers: ['npm/@metamask/client-utils', 'npm/@metamask/wallet', 'npm/@metamask/logging-controller'] ..."
},
"time": {
"created": "2025-10-30T11:42:39.682Z",
"modified": "2026-07-23T14:00:35.838Z"
}
}