npm @newton-xyz/sdk @1.0.7
score
0.6503
med
flagged
2026-07-23 14:15
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=1.0.7 but max published is 1.0.8--canary.178.29972113016.0 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/newt-foundation/newton-sdk.git' also claimed by 1 package(s) under different publishers: ['npm/@magicnewton/newton-protocol-sdk'] |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"jhwon0820",
"albert.brown"
],
"versions": 57
}
Evidence (package doc at flag time)
{
"dependencies_count": 7,
"dist": {
"integrity": "sha512-h6LyD+oc0o2GWNZWIH0HZkGEo+fiiXW5X7tRFTXZRewe4ECwZaWZw7wdW2Tmx6sKZRg1/xeIM31h3ni+H/WUKQ==",
"tarball": "https://registry.npmjs.org/@newton-xyz/sdk/-/sdk-1.0.7.tgz",
"unpackedSize": 832875
},
"dist-tags": {
"canary": "1.0.8--canary.179.30035267310.0",
"latest": "1.0.7"
},
"latest_version": "1.0.7",
"maintainers": [
{
"email": "jhwon0820@gmail.com",
"name": "jhwon0820"
},
{
"email": "albert.brown@magic.link",
"name": "albert.brown"
}
],
"num_versions": 58,
"repository": {
"type": "git",
"url": "git+https://github.com/newt-foundation/newton-sdk.git"
},
"scripts": {
"build": "rollup -c rollup.config.mjs",
"check:all": "pnpm check:exports && pnpm check:size && pnpm check:types-resolution",
"check:exports": "publint",
"check:size": "size-limit",
"check:types-resolution": "attw --pack . --entrypoints . --ignore-rules=unexpected-module-syntax",
"check:unused": "knip",
"clean": "rimraf dist && rimraf node_modules",
"docs:broken-links": "cd site && mintlify broken-links",
"docs:check": "./scripts/check-docs-twoslash.sh",
"docs:dev": "cd site && mintlify dev",
"format": "biome format --write src/",
"format:check": "biome format src/",
"lint": "biome check src/",
"lint:fix": "biome check --write src/",
"preinstall": "npx only-allow pnpm",
"prepare": "simple-git-hooks",
"sync-abis": "./scripts/sync-abis.sh",
"sync-deployments": "./scripts/sync-deployments.sh",
"test": "vitest run --passWithNoTests",
"test:coverage": "vitest run --coverage",
"test:typecheck": "vitest --config vitest.typecheck.config.ts --passWithNoTests",
"test:watch": "vitest",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=1.0.7 but max published is 1.0.8--canary.178.29972113016.0",
"shared_repo_different_publisher": "repo 'git+https://github.com/newt-foundation/newton-sdk.git' also claimed by 1 package(s) under different publishers: ['npm/@magicnewton/newton-protocol-sdk']"
},
"time": {
"created": "2026-06-06T22:17:27.012Z",
"modified": "2026-07-23T18:48:36.572Z"
}
}