BEACON

← candidates

npm @ui5/webcomponents @2.24.2

score
0.7333 high
flagged 2026-07-29 00:53
signals by category
content 1 topology 2

maintainers added: —

package profile →

Signals fired

signalweightrationale
content
provenance_dropped 0.8 prior version published with SLSA attestation; current version has none
topology
dist_tag_anomaly 0.5 dist-tags.latest=2.24.2 but max published is 2.25.0-rc.0
shared_repo_different_publisher 0.9 repo 'git+https://github.com/UI5/webcomponents.git' also claimed by 10 package(s) under different publishers: ['npm/@ui5/webcomponents-tools', 'npm/@ui5/webcomponents-base', 'npm/@ui5/webcomponents-theming'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "sap-ospo-admin",
    "ui5-bot"
  ],
  "versions": 716
}

Evidence (package doc at flag time)

{
  "dependencies_count": 6,
  "dist": {
    "integrity": "sha512-8dWIdHhwIpWh6HH4jAJj16B/HRQQhojb7LD4W71P7JlljvGu9v7+84zetEXs0R5kjxLz7eCX0nMHgzttz2vmyQ==",
    "tarball": "https://registry.npmjs.org/@ui5/webcomponents/-/webcomponents-2.24.2.tgz",
    "unpackedSize": 22387551
  },
  "dist-tags": {
    "experimental": "0.0.0-10f3c0dc7",
    "hotfix-2.10": "2.10.1",
    "hotfix-2.13": "2.13.8",
    "hotfix-2.14": "2.14.1",
    "hotfix-2.15": "2.15.5",
    "hotfix-2.16": "2.16.3",
    "hotfix-2.17": "2.17.2",
    "hotfix-2.18": "2.18.2",
    "hotfix-2.19": "2.19.4",
    "hotfix-2.20": "2.20.5",
    "hotfix-2.21": "2.21.2",
    "hotfix-2.22": "2.22.1",
    "hotfix-2.23": "2.23.3",
    "latest": "2.24.2",
    "next": "2.25.0-rc.3",
    "v1": "1.24.29"
  },
  "latest_version": "2.24.2",
  "maintainers": [
    {
      "email": "ospo@sap.com",
      "name": "sap-ospo-admin"
    },
    {
      "email": "ui5-bot+npm-ui5-bot@sap.com",
      "name": "ui5-bot"
    }
  ],
  "num_versions": 717,
  "repository": {
    "directory": "packages/main",
    "type": "git",
    "url": "git+https://github.com/UI5/webcomponents.git"
  },
  "scripts": {
    "build": "wc-dev build",
    "bundle": "wc-dev build.bundle",
    "clean": "wc-dev clean",
    "create-ui5-element": "wc-create-ui5-element",
    "generate": "wc-dev generate",
    "generateCEM": "wc-dev generateAPI.generateCEM",
    "lint": "wc-dev lint",
    "lint:scope": "wc-dev scope.lint",
    "mergeCEM": "wc-dev generateAPI.mergeCEM",
    "prepublishOnly": "tsc -b",
    "start": "wc-dev start",
    "test": "yarn test:cypress",
    "test:cypress": "wc-dev test-cy-ci",
    "test:cypress:open": "wc-dev test-cy-open",
    "test:cypress:single": "npx cypress run --component --browser chrome --spec",
    "test:cypress:suite-1": "wc-dev test-cy-ci-suite-1",
    "test:cypress:suite-2": "wc-dev test-cy-ci-suite-2",
    "test:cypress:suite-3": "wc-dev test-cy-ci-suite-3",
    "test:cypress:suite-4": "wc-dev test-cy-ci-suite-4",
    "test:ssr": "node -e \"import('./test/ssr/component-imports.js')\"",
    "test:vitest": "yarn vitest run",
    "validateCEM": "wc-dev generateAPI.validateCEM",
    "watch": "wc-dev watch"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=2.24.2 but max published is 2.25.0-rc.0",
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "shared_repo_different_publisher": "repo 'git+https://github.com/UI5/webcomponents.git' also claimed by 10 package(s) under different publishers: ['npm/@ui5/webcomponents-tools', 'npm/@ui5/webcomponents-base', 'npm/@ui5/webcomponents-theming'] ..."
  },
  "time": {
    "created": "2019-02-11T15:08:46.431Z",
    "modified": "2026-07-24T12:27:17.849Z"
  }
}