npm nx @23.1.0
score
0.7975
high
flagged
2026-07-24 15:16
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=23.1.0 but max published is 23.2.0-beta.0 |
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/nrwl/nx.git' also claimed by 10 package(s) under different publishers: ['npm/create-nx-workspace', 'npm/@nx/vite', 'npm/@nx/expo'] ... |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"jack-nrwl",
"meeroslav",
"nrwlowner",
"nrwl-jason",
"juristr",
"altan-nrwl",
"jameshenry",
"vsavkin"
],
"versions": 2626
}
Evidence (package doc at flag time)
{
"dependencies_count": 115,
"dist": {
"integrity": "sha512-Z4hzIdRF6naDDpOTOazrJODmbU5D7slq94FR5q/dySW+evGxiOSFLO981VqDVvtNEvHPnEDh/C1wvFseWyvSrQ==",
"tarball": "https://registry.npmjs.org/nx/-/nx-23.1.0.tgz",
"unpackedSize": 17064450
},
"dist-tags": {
"canary": "23.2.0-canary.20260722-6a072a2",
"latest": "23.1.0",
"next": "23.2.0-beta.2",
"previous": "22.7.7",
"pull-request": "23.1.0-pr.36263.fac529b"
},
"latest_version": "23.1.0",
"maintainers": [
{
"email": "jack@nrwl.io",
"name": "jack-nrwl"
},
{
"email": "missing.manual@gmail.com",
"name": "meeroslav"
},
{
"email": "victor@nrwl.io",
"name": "nrwlowner"
},
{
"email": "jason@nrwl.io",
"name": "nrwl-jason"
},
{
"email": "juri.strumpflohner@gmail.com",
"name": "juristr"
},
{
"email": "altan@nrwl.io",
"name": "altan-nrwl"
},
{
"email": "james@henry.sc",
"name": "jameshenry"
},
{
"email": "avix1000@gmail.com",
"name": "vsavkin"
}
],
"num_versions": 2626,
"repository": {
"directory": "packages/nx",
"type": "git",
"url": "https://github.com/nrwl/nx.git"
},
"scripts": {
"postinstall": "node -e \"try{require('./dist/bin/post-install')}catch(e){}\""
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=23.1.0 but max published is 23.2.0-beta.0",
"install_script_payload": "install/lifecycle script matches payload regex",
"shared_repo_different_publisher": "repo 'https://github.com/nrwl/nx.git' also claimed by 10 package(s) under different publishers: ['npm/create-nx-workspace', 'npm/@nx/vite', 'npm/@nx/expo'] ..."
},
"time": {
"created": "2011-08-08T05:06:23.816Z",
"modified": "2026-07-22T14:30:57.911Z"
}
}