npm @firebase/data-connect @0.7.1
score
0.7333
high
flagged
2026-07-28 14:04
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.7.1 but max published is 0.7.2-20260728185501 |
| mass_publish_burst | 0.8 | publisher 'google-wombot' pushed 6 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/firebase/firebase-js-sdk.git' also claimed by 4 package(s) under different publishers: ['npm/@unstoppabledomains/firebase-auth', 'npm/@depup/firebase__analytics-compat', 'npm/@depup/firebase__app-check'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"firebase-ops",
"feiyang.chen",
"google-wombot",
"chholland"
],
"versions": 432
}
Evidence (package doc at flag time)
{
"dependencies_count": 5,
"dist": {
"integrity": "sha512-2LbUU8mmSA63HknxQMmWHjpzuNLBKflvVwQc2tpoVKg0biWleNEJX031ELks0vzFs+dDjOUkCJR72RP6mQHFOg==",
"tarball": "https://registry.npmjs.org/@firebase/data-connect/-/data-connect-0.7.1.tgz",
"unpackedSize": 1808147
},
"dist-tags": {
"auth-redirect-credentials": "0.3.3-auth-redirect-credentials.b424e5897",
"caching-fdc": "0.3.11-caching-fdc.9f17eac6e",
"canary": "0.5.0-canary.bfb9accdc",
"dataconnect-preview": "0.0.3-dataconnect-preview.d986d4bf2",
"eap-ai-hybridinference": "0.3.5-eap-ai-hybridinference.58d92df33",
"eap-crashlytics": "0.7.1-eap-crashlytics.659b578fb",
"eap-firestore-pipelines": "0.3.11-eap-firestore-pipelines.2.e4cdd2e06",
"eap-vertexai-hybgoog": "0.3.3-eap-vertexai-hybgoog.31261ca31",
"eap-vertexai-hybridinference": "0.3.3-eap-vertexai-hybridinference.e83974308",
"firebase-studio-sdk-integration": "0.3.11-firebase-studio-sdk-integration.556d1bed2",
"latest": "0.7.1",
"next": "0.7.2-20260728185501",
"ssl-check": "0.3.3-ssl-check.4f23f3343"
},
"latest_version": "0.7.1",
"maintainers": [
{
"email": "operations+plainlogo@firebase.com",
"name": "firebase-ops"
},
{
"email": "feiyang.chen1@gmail.com",
"name": "feiyang.chen"
},
{
"email": "node-team-npm+wombot@google.com",
"name": "google-wombot"
},
{
"email": "chholland@google.com",
"name": "chholland"
}
],
"num_versions": 434,
"repository": {
"directory": "packages/data-connect",
"type": "git",
"url": "git+https://github.com/firebase/firebase-js-sdk.git"
},
"scripts": {
"api-report": "TS_NODE_COMPILER_OPTIONS='{\"module\":\"commonjs\"}' ts-node ../../repo-scripts/prune-dts/extract-public-api.ts --package data-connect --packageRoot . --typescriptDts ./dist/src/index.d.ts --rollupDts ./dist/private.d.ts --untrimmedRollupDts ./dist/internal.d.ts --publicDts ./dist/public.d.ts && yarn api-report:api-json",
"api-report:api-json": "rm -rf temp && api-extractor run --local --verbose",
"build": "rollup -c rollup.config.js && yarn api-report",
"build:deps": "lerna run --scope @firebase/'{app,data-connect}' --include-dependencies build",
"dev": "rollup -c -w",
"doc": "api-documenter markdown --input temp --output docs",
"lint": "eslint -c .eslintrc.js '**/*.ts' --ignore-path '../../.gitignore' --fix",
"lint:fix": "eslint --fix -c .eslintrc.js '**/*.ts' --ignore-path '../../.gitignore'",
"prettier": "prettier --write '*.js' '*.ts' '@(src|test)/**/*.ts'",
"test": "run-p --npm-path npm lint test:emulator",
"test:all": "run-p --npm-path npm lint test:browser test:node",
"test:browser": "karma start",
"test:ci": "node ../../scripts/run_tests_in_ci.js -s test:all",
"test:emulator": "ts-node --compiler-options='{\"module\":\"commonjs\"}' ../../scripts/emulator-testing/dataconnect-test-runner.ts",
"test:node": "TS_NODE_FILES=true TS_NODE_CACHE=NO TS_NODE_COMPILER_OPTIONS='{\"module\":\"commonjs\"}' nyc --reporter lcovonly -- mocha 'test/{,!(browser)/**/}*.test.ts' --file src/index.node.ts --config ../../config/mocharc.node.js",
"test:unit": "TS_NODE_FILES=true TS_NODE_CACHE=NO TS_NODE_COMPILER_OPTIONS='{\"module\":\"commonjs\"}' nyc --reporter lcovonly -- mocha 'test/unit/**/*.test.ts' --file src/index.node.ts --config ../../config/mocharc.node.js",
"typings:public": "node ../../scripts/build/use_typings.js ./dist/public.d.ts"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.7.1 but max published is 0.7.2-20260728185501",
"mass_publish_burst": "publisher 'google-wombot' pushed 6 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/firebase/firebase-js-sdk.git' also claimed by 4 package(s) under different publishers: ['npm/@unstoppabledomains/firebase-auth', 'npm/@depup/firebase__analytics-compat', 'npm/@depup/firebase__app-check'] ..."
},
"time": {
"created": "2024-05-08T21:13:50.556Z",
"modified": "2026-07-28T19:04:15.243Z"
}
}