npm @depup/aws-sdk__xml-builder @3.972.36-depup.0
score
0.595
med
flagged
2026-07-24 19:40
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| mass_publish_burst | 0.8 | publisher 'chiefmikey' pushed 43 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/aws/aws-sdk-js-v3.git' also claimed by 10 package(s) under different publishers: ['npm/@aws-sdk/client-networkmanager', 'npm/@aws-sdk/rds-signer', 'npm/@aws-sdk/credential-provider-http'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"chiefmikey"
],
"versions": 9
}
Evidence (package doc at flag time)
{
"dependencies_count": 2,
"dist": {
"integrity": "sha512-gjVMEK5lGcHwOTC7WxJ09+dkOG4mZJqvKL/9cGtOclyQ4r+MHCEK5Vl0fa+JndiE7P9c1Ov8w2D/3pjaYEbRDA==",
"tarball": "https://registry.npmjs.org/@depup/aws-sdk__xml-builder/-/aws-sdk__xml-builder-3.972.36-depup.0.tgz",
"unpackedSize": 41877
},
"dist-tags": {
"latest": "3.972.36-depup.0"
},
"latest_version": "3.972.36-depup.0",
"maintainers": [
{
"email": "wolfemikl@gmail.com",
"name": "chiefmikey"
}
],
"num_versions": 9,
"repository": {
"directory": "packages-internal/xml-builder",
"type": "git",
"url": "git+https://github.com/aws/aws-sdk-js-v3.git"
},
"scripts": {
"build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
"build:cjs": "node ../../scripts/compilation/inline",
"build:es": "premove dist-es && tsc -p tsconfig.es.json",
"build:include:deps": "yarn g:turbo run build -F=\"$npm_package_name\"",
"build:types": "premove dist-types && tsc -p tsconfig.types.json",
"build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
"clean": "premove dist-cjs dist-es dist-types",
"profile": "node --inspect-brk ./scripts/benchmark",
"test": "yarn g:vitest run",
"test:fuzz": "jazzer tests/xml-parser.fuzz.js corpus --sync -i xml-parser -- -max_total_time=300",
"test:watch": "yarn g:vitest watch"
},
"signal_details": {
"mass_publish_burst": "publisher 'chiefmikey' pushed 43 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/aws/aws-sdk-js-v3.git' also claimed by 10 package(s) under different publishers: ['npm/@aws-sdk/client-networkmanager', 'npm/@aws-sdk/rds-signer', 'npm/@aws-sdk/credential-provider-http'] ..."
},
"time": {
"created": "2026-03-17T16:30:45.014Z",
"modified": "2026-07-21T16:02:49.894Z"
}
}