npm bitgo @52.4.0
score
0.75
high
flagged
2026-07-28 15:31
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/BitGo/BitGoJS.git' also claimed by 10 package(s) under different publishers: ['npm/@bitgo-beta/logger', 'npm/@bitgo-beta/sjcl', 'npm/@bitgo-beta/utxo-staking'] ... |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['@bitgo/sdk-coin-pearl'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"bitgobot"
],
"versions": 995
}
Evidence (package doc at flag time)
{
"dependencies_count": 95,
"dist": {
"integrity": "sha512-Bo24PInhVwFSw7KPlWtpew2RxxbhivXts78YRyHT2BOhiH0S6MPlSjo059J+8tHho00RCj1MVwYApkKro4Havg==",
"tarball": "https://registry.npmjs.org/bitgo/-/bitgo-52.4.0.tgz",
"unpackedSize": 62275094
},
"dist-tags": {
"alpha": "11.5.1-alpha.0",
"cr406-hf": "14.2.0-hotfix.3",
"cr604-hf": "14.2.0-hotfix.0",
"cspr-testing": "11.14.0-cspr-testing.1",
"dev": "14.4.0-dev.1",
"hbar": "11.5.1-hbar.0",
"hotfix": "14.3.0-hotfix.2",
"latest": "52.4.0",
"node12": "13.1.1-node12.3",
"rc": "14.3.0-rc.40",
"stx-fix": "12.0.1-stx-fix.0",
"wrw-hotfix": "14.1.0-wrw-hotfix.2"
},
"latest_version": "52.4.0",
"maintainers": [
{
"email": "infra+npmjs@bitgo.com",
"name": "bitgobot"
}
],
"num_versions": 997,
"repository": {
"directory": "modules/bitgo",
"type": "git",
"url": "git+https://github.com/BitGo/BitGoJS.git"
},
"scripts": {
"audit": "if [ \"$(npm --version | cut -d. -f1)\" -ge \"6\" ]; then npm audit; else echo \"npm >= 6 required to perform audit. skipping...\"; fi",
"browser-test": "karma start karma.conf.js",
"build": "yarn tsc --build --incremental --verbose .",
"check-fmt": "prettier --check '**/*.{ts,js,json}'",
"clean": "rm -r dist/*",
"compile": "yarn webpack-prod",
"compile-dbg": "yarn webpack-dev",
"compile-test": "yarn webpack-dev",
"coverage": "nyc -- npm run unit-test",
"fmt": "prettier --write '{src,test}/**/*.{ts,js,json}'",
"gen-docs": "typedoc",
"integration-test": "nyc -- mocha \"test/v2/integration/**/*.ts\"",
"lint": "eslint --quiet .",
"prepack": "tsx ../../scripts/generate-bitgo-shrinkwrap.ts",
"prepare": "npm run build",
"prepublishOnly": "npm run compile",
"test": "npm run coverage",
"unit-test": "NODE_OPTIONS=--max-old-space-size=8192 mocha 'test/v2/unit/**/*.ts' 'test/unit/**/*.ts'",
"unprettied": "grep -R -L --include '*.ts' --include '*.js' --include '*.json' '@prettier' src test",
"upload-artifacts": "node scripts/upload-test-reports.js",
"upload-docs": "node scripts/upload-docs.js",
"webpack-dev": "cross-env NODE_ENV=development webpack",
"webpack-prod": "NODE_OPTIONS=--max-old-space-size=4096 cross-env NODE_ENV=production webpack"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['@bitgo/sdk-coin-pearl']",
"shared_repo_different_publisher": "repo 'git+https://github.com/BitGo/BitGoJS.git' also claimed by 10 package(s) under different publishers: ['npm/@bitgo-beta/logger', 'npm/@bitgo-beta/sjcl', 'npm/@bitgo-beta/utxo-staking'] ..."
},
"time": {
"created": "2014-12-31T19:04:46.108Z",
"modified": "2026-07-28T20:30:58.665Z"
}
}