← candidates

npm @huggingface/hub @2.14.2

Signals fired

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "julien-c",
    "pierric",
    "coyotte508",
    "xenova",
    "gary149"
  ],
  "versions": 158
}

Evidence (package doc at flag time)

{
  "dependencies_count": 2,
  "dist": {
    "integrity": "sha512-Fuzi18TYmc0JEUDVw6uSKSXGOYipQyzu2ArvLYfOmk0Ts++ItKPaAeKli7s1MMXgedEmbl4x73pXy6aZBQTtSw==",
    "tarball": "https://registry.npmjs.org/@huggingface/hub/-/hub-2.14.2.tgz",
    "unpackedSize": 2313721
  },
  "dist-tags": {
    "cli": "2.0.1-cli.7",
    "latest": "2.14.2",
    "next": "2.7.1-queued-commit.1",
    "sha": "0.15.1-sha.1",
    "wasm": "0.15.1-wasm.2",
    "xet": "1.1.0-xet.3"
  },
  "latest_version": "2.14.2",
  "maintainers": [
    {
      "email": "chaumond@gmail.com",
      "name": "julien-c"
    },
    {
      "email": "pierric.gh@gmail.com",
      "name": "pierric"
    },
    {
      "email": "coyotte508@protonmail.com",
      "name": "coyotte508"
    },
    {
      "email": "admin@xenova.com",
      "name": "xenova"
    },
    {
      "email": "v@huggingface.co",
      "name": "gary149"
    }
  ],
  "num_versions": 159,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/huggingface/huggingface.js.git"
  },
  "scripts": {
    "bench": "tsx scripts/bench.ts",
    "build": "tsup && tsc --emitDeclarationOnly --declaration",
    "build:xet-wasm": "./scripts/build-xet-wasm.sh -t bundler --clean",
    "check": "tsc",
    "debug-xet": "tsx scripts/debug-xet.ts",
    "format": "oxfmt .",
    "format:check": "oxfmt --check .",
    "lint": "eslint --quiet --fix --ext .cjs,.ts .",
    "lint:check": "eslint --ext .cjs,.ts .",
    "test": "vitest run",
    "test:browser": "vitest run --browser.name=chrome --browser.headless --config vitest-browser.config.mts"
  },
  "signal_details": {
    "rapid_release": "3 versions in last 24h: ['2.14.0', '2.14.1', '2.14.2']",
    "shared_repo_different_publisher": "repo 'git+https://github.com/huggingface/huggingface.js.git' also claimed by 3 package(s) under different publishers: ['npm/@huggingface/tasks', 'npm/@huggingface/inference', 'npm/@huggingface/xetchunk-wasm']"
  },
  "time": {
    "created": "2023-02-17T21:17:20.903Z",
    "modified": "2026-07-27T17:53:51.005Z"
  }
}