npm @xmtp/node-bindings @1.10.0
score
0.7
high
flagged
2026-06-05 08:27
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=1.10.0 but max published is 2.0.0-nightly.20260604.90d0bfb |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/xmtp/libxmtp.git' also claimed by 1 package(s) under different publishers: ['npm/@xmtp/wasm-bindings'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"xmtp-eng-robot",
"galligan",
"nick-xmtp"
],
"versions": 186
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-US/YvMP7RL1DkNeiZ75ZjEyvMwLIrEPn12dBj5h7lAesM2N5snwnstJ2NNk3LpW3kCNDdzwhe/G0ZSb0PhwNeg==",
"tarball": "https://registry.npmjs.org/@xmtp/node-bindings/-/node-bindings-1.10.0.tgz",
"unpackedSize": 233939419
},
"dist-tags": {
"latest": "1.10.0",
"nightly": "1.11.0-nightly.20260605.564252d",
"prerelease": "1.10.0-dev.95f4050"
},
"latest_version": "1.10.0",
"maintainers": [
{
"email": "eng+robot@xmtp.com",
"name": "xmtp-eng-robot"
},
{
"email": "matt.galligan@gmail.com",
"name": "galligan"
},
{
"email": "nicholas@xmtp.com",
"name": "nick-xmtp"
}
],
"num_versions": 186,
"repository": {
"directory": "bindings/node",
"type": "git",
"url": "git+https://github.com/xmtp/libxmtp.git"
},
"scripts": {
"artifacts": "napi artifacts",
"build:clean": "rm -rf dist",
"build:debug": "napi build --platform --esm",
"build:finish": "mkdir dist && mv index.js dist && mv index.d.ts dist && mv *.node dist",
"build:release": "napi build --platform --release --esm",
"build:test": "napi build --platform --esm --features test-utils",
"clean": "yarn build:clean && yarn test:clean",
"format": "prettier -w .",
"format:check": "prettier -c .",
"lint": "yarn lint:clippy && yarn lint:fmt",
"lint:clippy": "cargo clippy --locked --all-features --all-targets --no-deps -- -D warnings",
"lint:fmt": "cargo fmt --check",
"test": "yarn build:clean && yarn build:test && yarn build:finish && vitest run",
"test:clean": "rm -rf test/*.db3*"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=1.10.0 but max published is 2.0.0-nightly.20260604.90d0bfb",
"shared_repo_different_publisher": "repo 'git+https://github.com/xmtp/libxmtp.git' also claimed by 1 package(s) under different publishers: ['npm/@xmtp/wasm-bindings']"
},
"time": {
"created": "2024-10-11T19:35:19.721Z",
"modified": "2026-06-05T07:41:07.949Z"
}
}