npm vercel @54.9.1
score
0.7138
high
flagged
2026-06-05 07:18
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/vercel/vercel.git' also claimed by 10 package(s) under different publishers: ['npm/@vercel/connect', 'npm/@vercel/redwood', 'npm/@vercel/aws'] ... |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['@vercel/cli-auth'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"matheuss",
"rauchg",
"matt.straka",
"vercel-release-bot",
"zeit-bot"
],
"versions": 987
}
Evidence (package doc at flag time)
{
"dependencies_count": 34,
"dist": {
"integrity": "sha512-UZacWxc897JpDaSdmz+J35rUDW2PYSQQH/SdVxwsF6AMo72Ej0EolhaFdR6/xQLJMnquAhKoQYSlSzzhDrZR6Q==",
"tarball": "https://registry.npmjs.org/vercel/-/vercel-54.9.1.tgz",
"unpackedSize": 9151034
},
"dist-tags": {
"canary": "51.7.0",
"latest": "54.9.1"
},
"latest_version": "54.9.1",
"maintainers": [
{
"email": "matheus.frndes@gmail.com",
"name": "matheuss"
},
{
"email": "rauchg@gmail.com",
"name": "rauchg"
},
{
"email": "matt.j.straka@gmail.com",
"name": "matt.straka"
},
{
"email": "infra+release@vercel.com",
"name": "vercel-release-bot"
},
{
"email": "team@zeit.co",
"name": "zeit-bot"
}
],
"num_versions": 990,
"repository": {
"directory": "packages/cli",
"type": "git",
"url": "git+https://github.com/vercel/vercel.git"
},
"scripts": {
"build": "node scripts/build.mjs",
"build-binary": "pnpm --filter vercel... build && node scripts/build-binary.mjs",
"build-binary-node": "node scripts/build-binary-node.mjs",
"build-binary:host": "pnpm --filter vercel... build && node scripts/build-binary.mjs --target host --output ./dist-bin/vercel",
"coverage": "codecov",
"dev": "echo \"'pnpm dev [command]' has been removed. Use 'pnpm vercel [command]' instead.\" && exit 1",
"test": "vitest run --config ./vitest.config.mts",
"test-dev": "pnpm test test/dev/",
"test-e2e-node-all-versions": "rimraf test/fixtures/integration && pnpm test test/integration-1.test.ts test/integration-2.test.ts test/integration-3.test.ts test/integration-link-env-pull.test.ts",
"test:evals": "tsx evals/run.ts",
"test:evals:dry": "tsx evals/run.ts --dry",
"test:evals:local-fixture": "tsx evals/run.ts --local-fixture",
"test:evals:smoke": "tsx evals/run.ts smoke --smoke",
"type-check": "tsc --noEmit",
"vc": "pnpm vercel",
"vercel": "pnpm build && node ./dist/vc.js",
"vitest-run": "node scripts/vitest-run.mjs",
"vitest-unit": "glob --absolute 'test/unit/**/*.test.ts'"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['@vercel/cli-auth']",
"shared_repo_different_publisher": "repo 'git+https://github.com/vercel/vercel.git' also claimed by 10 package(s) under different publishers: ['npm/@vercel/connect', 'npm/@vercel/redwood', 'npm/@vercel/aws'] ..."
},
"time": {
"created": "2020-03-03T22:21:08.947Z",
"modified": "2026-06-04T13:58:02.974Z"
}
}