npm @nexpress/next @0.4.2
score
0.6068
med
flagged
2026-07-28 09:26
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.4.2 but max published is 0.5.0 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/nexpress-cms/nexpress.git' also claimed by 10 package(s) under different publishers: ['npm/@nexpress/oauth-providers', 'npm/@nexpress/cli', 'npm/@nexpress/plugin-block-callout'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"hahabsw"
],
"versions": 35
}
Evidence (package doc at flag time)
{
"dependencies_count": 3,
"dist": {
"integrity": "sha512-JBynn21ijJmXwvJGeCMdYdawxtfAB2+58YN6cpFT8M6JMays/3N0+DP8gC+rjdE2Tv3oFHOP5hhliJlz3B9Tvw==",
"tarball": "https://registry.npmjs.org/@nexpress/next/-/next-0.4.2.tgz",
"unpackedSize": 446111
},
"dist-tags": {
"latest": "0.4.2"
},
"latest_version": "0.4.2",
"maintainers": [
{
"email": "hahabsw@gmail.com",
"name": "hahabsw"
}
],
"num_versions": 36,
"repository": {
"directory": "packages/next",
"type": "git",
"url": "git+https://github.com/nexpress-cms/nexpress.git"
},
"scripts": {
"build": "rm -rf dist && tsup",
"clean": "rm -rf dist",
"dev": "tsup --watch --no-clean",
"lint": "eslint . --cache --cache-location node_modules/.cache/eslint",
"test": "vitest run",
"test:watch": "vitest",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.4.2 but max published is 0.5.0",
"shared_repo_different_publisher": "repo 'git+https://github.com/nexpress-cms/nexpress.git' also claimed by 10 package(s) under different publishers: ['npm/@nexpress/oauth-providers', 'npm/@nexpress/cli', 'npm/@nexpress/plugin-block-callout'] ..."
},
"time": {
"created": "2026-05-11T17:00:41.475Z",
"modified": "2026-07-28T14:11:29.569Z"
}
}