npm @ledgerhq/hw-app-exchange @0.23.1
score
0.65
med
flagged
2026-07-27 22:10
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.23.1 but max published is 0.24.0-nightly.20260725030056 |
| mass_publish_burst | 0.8 | publisher 'ldg-github-ci' pushed 40 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"phenry-ledger",
"sergii-shkolin",
"gbrahm-ledger",
"thomas.coudray",
"ldg-github-ci",
"vbouzon",
"ledger-releaser"
],
"versions": 347
}
Evidence (package doc at flag time)
{
"dependencies_count": 7,
"dist": {
"integrity": "sha512-4c31XC10B8Q1p1MmJoCk1ipNVipAGlXDBs5+gsi46Vy0Q2qp6a2odzrIU5UXKxIeuKs4sXRvkXI4yVK/A8sihw==",
"tarball": "https://registry.npmjs.org/@ledgerhq/hw-app-exchange/-/hw-app-exchange-0.23.1.tgz",
"unpackedSize": 241835
},
"dist-tags": {
"custom-exchange": "0.4.2-custom-exchange.0",
"hotfix": "0.5.2-hotfix.0",
"latest": "0.23.1",
"new-wc": "0.4.5-new-wc.0",
"new-wc-test": "0.4.5-new-wc-test.0",
"next": "0.10.3-next.0",
"nightly": "0.24.0-nightly.20260728030028",
"notarizer": "0.1.3-notarizer.0",
"recover-beta": "0.1.1-recover-beta.0",
"start-exchange": "0.4.4-start-exchange.0",
"tag-word": "0.2.4-tag-word.0",
"wc-test": "0.4.5-wc-test.0",
"windows-certificate": "0.5.0-windows-certificate.0"
},
"latest_version": "0.23.1",
"maintainers": [
{
"email": "pascal.henry@ledger.fr",
"name": "phenry-ledger"
},
{
"email": "sergii.shkolin-ext@ledger.fr",
"name": "sergii-shkolin"
},
{
"email": "gandalf.brahm@ledger.fr",
"name": "gbrahm-ledger"
},
{
"email": "thomas.coudray@ledger.fr",
"name": "thomas.coudray"
},
{
"email": "infra-purchasing@ledger.fr",
"name": "ldg-github-ci"
},
{
"email": "vincent.bouzon@live.fr",
"name": "vbouzon"
},
{
"email": "team-secops+ledger-releaser-npmjs@ledger.fr",
"name": "ledger-releaser"
}
],
"num_versions": 349,
"repository": {
"type": "git",
"url": "git+https://github.com/LedgerHQ/ledger-live.git"
},
"scripts": {
"build": "tsc --project tsconfig.build.json && tsc --project tsconfig.build.json -m esnext --moduleResolution bundler --outDir lib-es",
"clean": "rimraf lib lib-es",
"coverage": "jest --coverage --passWithNoTests",
"doc": "documentation readme src/** --section=API --pe ts --re ts --re d.ts",
"lint": "oxlint ./src --ignore-pattern '**/setupTests.ts'",
"lint:fix": "pnpm lint --fix",
"prebuild": "pnpm pbjs -t json -r ledger_swap -o src/generate-protocol.json ./protocol.proto",
"prewatch": "pnpm build",
"test": "jest --config=jest.config.ts --runInBand",
"test-integ": "jest --config=jest.integ.config.ts",
"unimported": "unimported",
"watch": "tsc --watch --project tsconfig.build.json",
"watch:es": "tsc --watch --project tsconfig.build.json -m esnext --moduleResolution bundler --outDir lib-es"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.23.1 but max published is 0.24.0-nightly.20260725030056",
"mass_publish_burst": "publisher 'ldg-github-ci' pushed 40 packages in the last 15min on npm"
},
"time": {
"created": "2023-03-30T02:25:15.167Z",
"modified": "2026-07-28T03:10:42.610Z"
}
}