npm @firebase/messaging @0.13.0
score
0.85
high
flagged
2026-07-28 14:05
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| mass_publish_burst | 0.8 | publisher 'google-wombot' pushed 12 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/firebase/firebase-js-sdk.git' also claimed by 3 package(s) under different publishers: ['npm/@unstoppabledomains/firebase-auth', 'npm/@depup/firebase__analytics-compat', 'npm/@depup/firebase__app-check'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"firebase-ops",
"feiyang.chen",
"google-wombot",
"chholland"
],
"versions": 3675
}
Evidence (package doc at flag time)
{
"dependencies_count": 6,
"dist": {
"integrity": "sha512-GZoo0uGRvEbszo83xcgbjJp4FpkmBEr4l8Z4hi8gl+P1Spn/MTK3HapanMzSX4yUHuTEiF5hasWRxOaz+o5sxQ==",
"tarball": "https://registry.npmjs.org/@firebase/messaging/-/messaging-0.13.0.tgz",
"unpackedSize": 1142061
},
"dist-tags": {
"BundlePrerelease": "0.7.3-BundlePrerelease.b662f8c0a",
"auth-redirect-credentials": "0.12.17-auth-redirect-credentials.b424e5897",
"beta": "0.0.900-exp.8b4d7550f",
"caching-fdc": "0.12.23-caching-fdc.9f17eac6e",
"canary": "0.12.25-canary.bfb9accdc",
"dataconnect-preview": "0.12.10-dataconnect-preview.d986d4bf2",
"eap-ai-hybridinference": "0.12.18-eap-ai-hybridinference.58d92df33",
"eap-auth-emulator": "0.7.1-eap-auth-emulator.df41ee388",
"eap-crashlytics": "0.13.0-eap-crashlytics.659b578fb",
"eap-firestore-backfiller": "0.12.9-eap-firestore-backfiller.87babf60c",
"eap-firestore-debug": "0.7.3-1.0.0-eap-firestore-debug.9c6096f43",
"eap-firestore-pipelines": "0.12.23-eap-firestore-pipelines.2.e4cdd2e06",
"eap-storage-emulator": "0.7.4-eap-storage-emulator.ed256f582",
"eap-vertexai-hybgoog": "0.12.17-eap-vertexai-hybgoog.31261ca31",
"eap-vertexai-hybridinference": "0.12.17-eap-vertexai-hybridinference.e83974308",
"exp": "0.0.900-exp.f6733b13b",
"exp-types-exploration": "0.7.15-8.9.1-exp-types-exploration.635c9e3fd",
"firebase-studio-sdk-integration": "0.12.23-firebase-studio-sdk-integration.556d1bed2",
"firestore-bundles-alpha": "0.7.1-alpha.96ae6a5fe",
"latest": "0.13.0",
"longpoll": "0.7.3-longpoll.66863f547",
"next": "0.13.0-20260526192810",
"passkey-preview": "0.12.8-passkey-preview.103ead202",
"pr5646": "0.9.2-pr5646.2abc5e854",
"ssl-check": "0.12.17-ssl-check.4f23f3343",
"vertex-preview": "0.12.7-vertex-preview.8b70fc586",
"vertexai-preview": "0.12.11-vertexai-preview.6b035b7d3"
},
"latest_version": "0.13.0",
"maintainers": [
{
"email": "operations+plainlogo@firebase.com",
"name": "firebase-ops"
},
{
"email": "feiyang.chen1@gmail.com",
"name": "feiyang.chen"
},
{
"email": "node-team-npm+wombot@google.com",
"name": "google-wombot"
},
{
"email": "chholland@google.com",
"name": "chholland"
}
],
"num_versions": 3675,
"repository": {
"directory": "packages/messaging",
"type": "git",
"url": "git+https://github.com/firebase/firebase-js-sdk.git"
},
"scripts": {
"api-report": "yarn api-report:main && yarn api-report:sw && yarn api-report:api-json",
"api-report:api-json": "api-extractor run --local --verbose",
"api-report:main": "ts-node-script ../../repo-scripts/prune-dts/extract-public-api.ts --package messaging --packageRoot . --typescriptDts ./dist/src/index.d.ts --rollupDts ./dist/private.d.ts --untrimmedRollupDts ./dist/internal.d.ts --publicDts ./dist/index-public.d.ts",
"api-report:sw": "ts-node-script ../../repo-scripts/prune-dts/extract-public-api.ts --package messaging-sw --packageRoot . --typescriptDts ./dist/src/index.sw.d.ts --rollupDts ./dist/sw/private.d.ts --untrimmedRollupDts ./dist/sw/internal.d.ts --publicDts ./dist/sw/index-public.d.ts",
"build": "rollup -c && yarn api-report",
"build:deps": "lerna run --scope @firebase/'{app,messaging}' --include-dependencies build",
"build:release": "yarn build && yarn typings:public",
"dev": "rollup -c -w",
"lint": "eslint -c .eslintrc.js '**/*.ts' --ignore-path '../../.gitignore'",
"lint:fix": "eslint --fix -c .eslintrc.js '**/*.ts' --ignore-path '../../.gitignore'",
"test": "run-p --npm-path npm test:karma type-check lint ",
"test:ci": "node ../../scripts/run_tests_in_ci.js",
"test:debug": "karma start --browsers=Chrome --auto-watch",
"test:integration": "run-p --npm-path npm test:karma type-check lint && cd ../../integration/messaging && npm run-script test",
"test:karma": "karma start",
"trusted-type-check": "tsec -p tsconfig.json --noEmit",
"type-check": "tsc --noEmit",
"typings:public": "node ../../scripts/build/use_typings.js ./dist/index-public.d.ts"
},
"signal_details": {
"mass_publish_burst": "publisher 'google-wombot' pushed 12 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/firebase/firebase-js-sdk.git' also claimed by 3 package(s) under different publishers: ['npm/@unstoppabledomains/firebase-auth', 'npm/@depup/firebase__analytics-compat', 'npm/@depup/firebase__app-check']"
},
"time": {
"created": "2017-10-11T23:38:37.877Z",
"modified": "2026-07-21T18:23:13.156Z"
}
}