npm @depup/quasar @2.23.2-depup.0
score
0.5703
med
flagged
2026-07-27 11:46
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| mass_publish_burst | 0.8 | publisher 'chiefmikey' pushed 42 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/quasarframework/quasar.git' also claimed by 5 package(s) under different publishers: ['npm/@quasar/extras', 'npm/quasar-extras-svg-icons', 'npm/@cabloy/quasar-app-vite'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"chiefmikey"
],
"versions": 7
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-6wAWuSpr07hTMnLZpbJqwR2BrJPMIsta1yPcoNITZvs3zLi+K7PqoQoyTWloIZsKcu7ZPj3qx0ZYczkhjIJSFQ==",
"tarball": "https://registry.npmjs.org/@depup/quasar/-/quasar-2.23.2-depup.0.tgz",
"unpackedSize": 10198341
},
"dist-tags": {
"latest": "2.23.2-depup.0"
},
"latest_version": "2.23.2-depup.0",
"maintainers": [
{
"email": "wolfemikl@gmail.com",
"name": "chiefmikey"
}
],
"num_versions": 8,
"repository": {
"type": "git",
"url": "git+https://github.com/quasarframework/quasar.git"
},
"scripts": {
"build": "node build/script.build.js",
"clean": "node build/script.clean.js",
"dev": "cd ./playground && quasar dev && cd ..",
"dev:build": "cd ./playground && quasar build && cd ..",
"dev:build:ssr": "cd ./playground && quasar build -m ssr && cd ..",
"dev:quploader": "cd ./playground/upload-server && pnpm i && cd ../.. && node playground/upload-server/server.js",
"dev:ssr": "cd ./playground && quasar dev -m ssr && cd ..",
"dev:umd": "node build/script.test-umd.js",
"test": "pnpm --filter quasar-ui-test test",
"test:specs": "node ./testing/specs/script.js",
"test:specs:ci": "node ./testing/specs/script.js --ci",
"test:watch": "pnpm --filter quasar-ui-test test:watch",
"test:watch:ui": "pnpm --filter quasar-ui-test test:watch:ui"
},
"signal_details": {
"mass_publish_burst": "publisher 'chiefmikey' pushed 42 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/quasarframework/quasar.git' also claimed by 5 package(s) under different publishers: ['npm/@quasar/extras', 'npm/quasar-extras-svg-icons', 'npm/@cabloy/quasar-app-vite'] ..."
},
"time": {
"created": "2026-03-17T18:42:41.873Z",
"modified": "2026-07-27T16:46:10.917Z"
}
}