npm @streamr/cdn-location @103.3.2
score
0.6808
med
flagged
2026-07-29 05:48
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=103.3.2 but max published is 103.8.0-rc.3 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/streamr-dev/network.git' also claimed by 10 package(s) under different publishers: ['npm/@streamr/utils', 'npm/@streamr/test-utils', 'npm/@streamr/geoip-location'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"hpihkala",
"pzsavola",
"streamr-dev"
],
"versions": 80
}
Evidence (package doc at flag time)
{
"dependencies_count": 2,
"dist": {
"integrity": "sha512-ruRSByvUKH1vugrj9XSmuGo1Oxa0UMAIWeRLGO9sPOFdB8M8Ug7t4WeQ4M8PiUQm3PTKs8wQKHlxYchmMkElHQ==",
"tarball": "https://registry.npmjs.org/@streamr/cdn-location/-/cdn-location-103.3.2.tgz",
"unpackedSize": 149127
},
"dist-tags": {
"beta": "102.0.0-beta.3",
"experiment": "103.3.0-experiment.3",
"internal": "103.8.0-rc.3",
"latest": "103.3.2"
},
"latest_version": "103.3.2",
"maintainers": [
{
"email": "henri.pihkala@streamr.com",
"name": "hpihkala"
},
{
"email": "petri.savolainen@spaceify.net",
"name": "pzsavola"
},
{
"email": "devtools@streamr.com",
"name": "streamr-dev"
}
],
"num_versions": 81,
"repository": {
"directory": "packages/cdn-location",
"type": "git",
"url": "git+https://github.com/streamr-dev/network.git"
},
"scripts": {
"build": "tsc -b",
"check": "tsc -p tsconfig.jest.json",
"clean": "jest --clearCache --config '{}' || true; rm -rf dist *.tsbuildinfo node_modules/.cache || true",
"eslint": "eslint --cache --cache-location=node_modules/.cache/.eslintcache/ '*/**/*.{js,ts}'",
"generate-data-from-tsp-solution": "./data-generation/generateDataFromTSPSolverResult.sh",
"postbuild": "NODE_OPTIONS='--import tsx' rollup -c rollup.config.mts",
"prebuild": "npm run reset-self",
"prepare-for-tsp-solver": "./data-generation/prepareForTSPSolver.sh",
"reset-self": "rimraf --glob 'dist/**/*.tsbuildinfo'",
"test": "jest test/integration",
"test-integration": "jest test/integration"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=103.3.2 but max published is 103.8.0-rc.3",
"shared_repo_different_publisher": "repo 'git+https://github.com/streamr-dev/network.git' also claimed by 10 package(s) under different publishers: ['npm/@streamr/utils', 'npm/@streamr/test-utils', 'npm/@streamr/geoip-location'] ..."
},
"time": {
"created": "2024-02-29T10:19:51.271Z",
"modified": "2026-07-29T10:47:55.473Z"
}
}