npm @streamr/geoip-location @103.3.2
score
0.6675
med
flagged
2026-07-29 05:48
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=103.3.2 but max published is 103.8.0-rc.3 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/streamr-dev/network.git' also claimed by 10 package(s) under different publishers: ['npm/@streamr/utils', 'npm/@streamr/test-utils', 'npm/@streamr/cdn-location'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"hpihkala",
"pzsavola",
"streamr-dev"
],
"versions": 69
}
Evidence (package doc at flag time)
{
"dependencies_count": 6,
"dist": {
"integrity": "sha512-ATRHupz5nXooBIrTjcQSOkCY2+yacunwWnwMc9du94n1eU3hZ9ypysXZxe0x0Na2X5biUyIewxEQCaNlu9DgAg==",
"tarball": "https://registry.npmjs.org/@streamr/geoip-location/-/geoip-location-103.3.2.tgz",
"unpackedSize": 76682
},
"dist-tags": {
"beta": "102.0.0-beta.3",
"experiment": "103.3.0-experiment.3",
"internal": "103.8.0-rc.3",
"latest": "103.3.2"
},
"latest_version": "103.3.2",
"maintainers": [
{
"email": "henri.pihkala@streamr.com",
"name": "hpihkala"
},
{
"email": "petri.savolainen@spaceify.net",
"name": "pzsavola"
},
{
"email": "devtools@streamr.com",
"name": "streamr-dev"
}
],
"num_versions": 70,
"repository": {
"directory": "packages/geoip-location",
"type": "git",
"url": "git+https://github.com/streamr-dev/network.git"
},
"scripts": {
"build": "tsc -b",
"check": "tsc -p tsconfig.jest.json",
"clean": "jest --clearCache --config '{}' || true; rm -rf dist *.tsbuildinfo node_modules/.cache || true",
"eslint": "eslint --cache --cache-location=node_modules/.cache/.eslintcache/ '*/**/*.{js,ts}'",
"postbuild": "NODE_OPTIONS='--import tsx' rollup -c rollup.config.mts",
"prebuild": "npm run reset-self",
"reset-self": "rimraf --glob 'dist/**/*.tsbuildinfo'",
"test": "jest test/unit",
"test-unit": "jest test/unit"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=103.3.2 but max published is 103.8.0-rc.3",
"shared_repo_different_publisher": "repo 'git+https://github.com/streamr-dev/network.git' also claimed by 10 package(s) under different publishers: ['npm/@streamr/utils', 'npm/@streamr/test-utils', 'npm/@streamr/cdn-location'] ..."
},
"time": {
"created": "2024-05-06T13:55:59.665Z",
"modified": "2026-07-29T10:48:00.143Z"
}
}