npm @elastic/elasticsearch @9.4.2
score
0.8
high
flagged
2026-07-27 18:07
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| maintainer_churn | 1.0 | added: ['elastic-npm-admin'] |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=9.4.2 but max published is 9.5.0-unstable.20260511154244 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/elastic/elasticsearch-js.git' also claimed by 1 package(s) under different publishers: ['npm/@depup/elastic__elasticsearch'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"gtback",
"ikakavas"
],
"versions": 194
}
Evidence (package doc at flag time)
{
"dependencies_count": 2,
"dist": {
"integrity": "sha512-H9myMlLUeotkZhZ4ppinoMGDFxmW3lY8/s+4TIk1vFHyCvWU1Ej4T7azX5buCzemyFApgN0ywnEuvOtpel2VZg==",
"tarball": "https://registry.npmjs.org/@elastic/elasticsearch/-/elasticsearch-9.4.2.tgz",
"unpackedSize": 12322821
},
"dist-tags": {
"alpha": "9.0.0-alpha.5",
"latest": "9.4.2",
"next": "8.0.0-beta.1",
"previous": "8.19.2",
"unstable": "9.5.0-unstable.20260707145549"
},
"latest_version": "9.4.2",
"maintainers": [
{
"email": "npm3@gregback.net",
"name": "gtback"
},
{
"email": "ioannis.kakavas+elastic-npm-admin@elastic.co",
"name": "elastic-npm-admin"
},
{
"email": "ioannis.kakavas@elastic.co",
"name": "ikakavas"
}
],
"num_versions": 199,
"repository": {
"type": "git",
"url": "git+https://github.com/elastic/elasticsearch-js.git"
},
"scripts": {
"build": "npm run build:cjs && npm run build:esm",
"build:cjs": "tsc && rm -f lib/package.json lib/index.js lib/index.d.ts",
"build:esm": "tsc -p tsconfig.esm.json && npm run build:esm-fix && npm run build:esm-package",
"build:esm-fix": "tsc-esm-fix --target=esm && node scripts/fix-esm-require.js",
"build:esm-package": "node -e \"require('fs').writeFileSync('esm/package.json', JSON.stringify({type:'module'}, null, 2))\"",
"clean-build": "rimraf ./lib && mkdir lib && rimraf ./esm && mkdir esm",
"generate-version": "node scripts/generate-version.js",
"license-checker": "license-checker --production --onlyAllow='MIT;Apache-2.0;Apache1.1;ISC;BSD-3-Clause;BSD-2-Clause;0BSD'",
"license-header": "./scripts/check-spdx",
"lint": "eslint",
"lint:fix": "eslint . --fix ",
"prebuild": "npm run clean-build && npm run generate-version && npm run lint",
"prepublishOnly": "npm run build",
"test": "npm run build && npm run lint && c8 --exclude='**/api/**' --exclude='**/test/**' --check-coverage --statements=96 --branches=90 --lines=96 --functions=91 tap --disable-coverage",
"test:bundler": "npm run build && cd test/bundlers/repro && npm install file:../../.. && npx esbuild@0.24 --bundle --platform=node repro.mjs --outfile=bundled.js && node bundled.js",
"test:coverage-100": "npm run build && tap --coverage --100",
"test:coverage-report": "npm run build && tap --coverage && nyc report --reporter=text-lcov > coverage.lcov",
"test:coverage-ui": "npm run build && tap --coverage --coverage-report=html",
"test:esm": "npm run build:esm && tap test/esm/",
"test:integration": "npm run test:integration-build && env tap run --jobs=1 --allow-empty-coverage --allow-incomplete-coverage --reporter=junit --reporter-file=report-junit.xml generated-tests/",
"test:integration-build": "npm run build && node test/integration/index.js",
"test:unit": "npm run build && tap",
"test:unit-bun": "bun run build && bunx tap"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=9.4.2 but max published is 9.5.0-unstable.20260511154244",
"maintainer_churn": "added: ['elastic-npm-admin']",
"shared_repo_different_publisher": "repo 'git+https://github.com/elastic/elasticsearch-js.git' also claimed by 1 package(s) under different publishers: ['npm/@depup/elastic__elasticsearch']"
},
"time": {
"created": "2018-11-14T07:50:36.817Z",
"modified": "2026-07-10T21:19:13.788Z"
}
}