npm @connectedxm/admin @7.2.8
score
0.85
high
flagged
2026-06-05 07:06
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| provenance_dropped | 0.8 | prior version published with SLSA attestation; current version has none |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/connectedxm/admin-sdk.git' also claimed by 1 package(s) under different publishers: ['npm/@connectedxm/admin-sdk'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"mrrobbybob"
],
"versions": 506
}
Evidence (package doc at flag time)
{
"dependencies_count": 2,
"dist": {
"integrity": "sha512-5U8UNplffo+3dxYG7ivLiY06ogF/rWYIGRFlNRmA4ikG4JwZ5huWyU47fMzFbmwJ9JtbV3b5ZI243GWcWCN8uQ==",
"tarball": "https://registry.npmjs.org/@connectedxm/admin/-/admin-7.2.8.tgz",
"unpackedSize": 9221406
},
"dist-tags": {
"alpha": "4.3.0-beta.1",
"beta": "4.3.0-beta.3",
"latest": "7.2.8"
},
"latest_version": "7.2.8",
"maintainers": [
{
"email": "npm@connectedxm.com",
"name": "mrrobbybob"
}
],
"num_versions": 509,
"repository": {
"type": "git",
"url": "git+https://github.com/connectedxm/admin-sdk.git"
},
"scripts": {
"build": "tsup src/index.ts --format cjs,esm --dts",
"exports": "tsx scripts/exports.ts",
"generate": "tsx scripts/generate.ts",
"generate:sdks": "tsx scripts/generate-sdks.ts",
"lint": "eslint src/**/*.ts",
"local": "npm run release && npm pack",
"publish:sdk": "tsx scripts/publish-sdk.ts",
"release": "npm run lint && npm run build",
"upgrade": "ncu -i --format group"
},
"signal_details": {
"provenance_dropped": "prior version published with SLSA attestation; current version has none",
"shared_repo_different_publisher": "repo 'git+https://github.com/connectedxm/admin-sdk.git' also claimed by 1 package(s) under different publishers: ['npm/@connectedxm/admin-sdk']"
},
"time": {
"created": "2024-07-29T17:25:02.018Z",
"modified": "2026-06-05T04:04:02.400Z"
}
}