BEACON

← candidates

npm @ledgerhq/hw-app-exchange @0.23.1

score
0.65 med
flagged 2026-07-28 05:17
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
dist_tag_anomaly 0.5 dist-tags.latest=0.23.1 but max published is 0.24.0-nightly.20260725030056
mass_publish_burst 0.8 publisher 'ldg-github-ci' pushed 32 packages in the last 15min on npm

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "phenry-ledger",
    "sergii-shkolin",
    "gbrahm-ledger",
    "thomas.coudray",
    "ldg-github-ci",
    "vbouzon",
    "ledger-releaser"
  ],
  "versions": 349
}

Evidence (package doc at flag time)

{
  "dependencies_count": 7,
  "dist": {
    "integrity": "sha512-4c31XC10B8Q1p1MmJoCk1ipNVipAGlXDBs5+gsi46Vy0Q2qp6a2odzrIU5UXKxIeuKs4sXRvkXI4yVK/A8sihw==",
    "tarball": "https://registry.npmjs.org/@ledgerhq/hw-app-exchange/-/hw-app-exchange-0.23.1.tgz",
    "unpackedSize": 241835
  },
  "dist-tags": {
    "custom-exchange": "0.4.2-custom-exchange.0",
    "hotfix": "0.5.2-hotfix.0",
    "latest": "0.23.1",
    "new-wc": "0.4.5-new-wc.0",
    "new-wc-test": "0.4.5-new-wc-test.0",
    "next": "0.10.3-next.0",
    "nightly": "0.24.0-nightly.20260728100612",
    "notarizer": "0.1.3-notarizer.0",
    "recover-beta": "0.1.1-recover-beta.0",
    "start-exchange": "0.4.4-start-exchange.0",
    "tag-word": "0.2.4-tag-word.0",
    "wc-test": "0.4.5-wc-test.0",
    "windows-certificate": "0.5.0-windows-certificate.0"
  },
  "latest_version": "0.23.1",
  "maintainers": [
    {
      "email": "pascal.henry@ledger.fr",
      "name": "phenry-ledger"
    },
    {
      "email": "sergii.shkolin-ext@ledger.fr",
      "name": "sergii-shkolin"
    },
    {
      "email": "gandalf.brahm@ledger.fr",
      "name": "gbrahm-ledger"
    },
    {
      "email": "thomas.coudray@ledger.fr",
      "name": "thomas.coudray"
    },
    {
      "email": "infra-purchasing@ledger.fr",
      "name": "ldg-github-ci"
    },
    {
      "email": "vincent.bouzon@live.fr",
      "name": "vbouzon"
    },
    {
      "email": "team-secops+ledger-releaser-npmjs@ledger.fr",
      "name": "ledger-releaser"
    }
  ],
  "num_versions": 350,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/LedgerHQ/ledger-live.git"
  },
  "scripts": {
    "build": "tsc --project tsconfig.build.json && tsc --project tsconfig.build.json -m esnext --moduleResolution bundler --outDir lib-es",
    "clean": "rimraf lib lib-es",
    "coverage": "jest --coverage --passWithNoTests",
    "doc": "documentation readme src/** --section=API --pe ts --re ts --re d.ts",
    "lint": "oxlint ./src --ignore-pattern '**/setupTests.ts'",
    "lint:fix": "pnpm lint --fix",
    "prebuild": "pnpm pbjs -t json -r ledger_swap -o src/generate-protocol.json ./protocol.proto",
    "prewatch": "pnpm build",
    "test": "jest --config=jest.config.ts --runInBand",
    "test-integ": "jest --config=jest.integ.config.ts",
    "unimported": "unimported",
    "watch": "tsc --watch --project tsconfig.build.json",
    "watch:es": "tsc --watch --project tsconfig.build.json -m esnext --moduleResolution bundler --outDir lib-es"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=0.23.1 but max published is 0.24.0-nightly.20260725030056",
    "mass_publish_burst": "publisher 'ldg-github-ci' pushed 32 packages in the last 15min on npm"
  },
  "time": {
    "created": "2023-03-30T02:25:15.167Z",
    "modified": "2026-07-28T10:17:00.124Z"
  }
}