npm create-puck-app @0.22.2

score

0.72 high

flagged 2026-07-23 10:54

signals by category

content 1 topology 4

maintainers added: —

Signals fired

signal	weight	rationale
content
bin_added	0.8	new bin entry: ['create-puck-app']
topology
dist_tag_anomaly	0.5	dist-tags.latest=0.22.2 but max published is 0.23.0-canary.4bf6887d
mass_publish_burst	0.8	publisher 'chrisvxd' pushed 5 packages in the last 15min on npm
shared_repo_different_publisher	0.9	repo 'git+https://github.com/puckeditor/puck.git' also claimed by 2 package(s) under different publishers: ['npm/pika-editor-core', 'npm/@netlisian/puck']
dependency_added_unknown	0.6	5 new non-watchlisted dep(s): ['commander', 'glob', 'handlebars', 'inquirer', 'prettier']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "chrisvxd"
  ],
  "versions": 756
}

Evidence (package doc at flag time)

{
  "dependencies_count": 5,
  "dist": {
    "integrity": "sha512-uqxJWiZiZL9uQabgs3qumq0YKPBLeZmzqIbvDpG9Qxwvl7XSPDQfnSgDF5Nc0nSKCbfDwYjQkoAR7ssV6C+ppw==",
    "tarball": "https://registry.npmjs.org/create-puck-app/-/create-puck-app-0.22.2.tgz",
    "unpackedSize": 121207
  },
  "dist-tags": {
    "canary": "0.23.0-canary.1b6fc858",
    "latest": "0.22.2"
  },
  "latest_version": "0.22.2",
  "maintainers": [
    {
      "email": "chrisvilla@me.com",
      "name": "chrisvxd"
    }
  ],
  "num_versions": 771,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/puckeditor/puck.git"
  },
  "scripts": {
    "generate": "node scripts/generate.js",
    "prepublishOnly": "yarn generate",
    "removeGitignore": "mv templates/.gitignore templates/gitignore",
    "restoreGitignore": "mv templates/gitignore templates/.gitignore"
  },
  "signal_details": {
    "bin_added": "new bin entry: ['create-puck-app']",
    "dependency_added_unknown": "5 new non-watchlisted dep(s): ['commander', 'glob', 'handlebars', 'inquirer', 'prettier']",
    "dist_tag_anomaly": "dist-tags.latest=0.22.2 but max published is 0.23.0-canary.4bf6887d",
    "mass_publish_burst": "publisher 'chrisvxd' pushed 5 packages in the last 15min on npm",
    "shared_repo_different_publisher": "repo 'git+https://github.com/puckeditor/puck.git' also claimed by 2 package(s) under different publishers: ['npm/pika-editor-core', 'npm/@netlisian/puck']"
  },
  "time": {
    "created": "2023-07-05T16:49:51.599Z",
    "modified": "2026-07-23T15:54:13.676Z"
  }
}