npm qwc2 @2026.7.18

score

1.1167 high

flagged 2026-07-29 11:19

signals by category

content 2 topology 1

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)

Signals fired

signal	weight	rationale
content
new_install_script	1.0	first time ['preinstall'] present
install_script_payload	1.0	install/lifecycle script matches payload regex
topology
shared_repo_different_publisher	0.9	repo 'git+ssh://git@github.com/qgis/qwc2.git' also claimed by 1 package(s) under different publishers: ['npm/qwc2-lts']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "manisandro"
  ],
  "versions": 126
}

Evidence (package doc at flag time)

{
  "dependencies_count": 87,
  "dist": {
    "integrity": "sha512-s+8KflmNCTVDMRzgb+3i66XYh17JPt35XFB0Cp8DjiTQWoK6sdVGQx1A8CmonZ74Txq2YuKk6zf0mzZttDJITg==",
    "tarball": "https://registry.npmjs.org/qwc2/-/qwc2-2026.7.18.tgz",
    "unpackedSize": 5548887
  },
  "dist-tags": {
    "latest": "2026.7.18"
  },
  "latest_version": "2026.7.18",
  "maintainers": [
    {
      "email": "manisandro@gmail.com",
      "name": "manisandro"
    }
  ],
  "num_versions": 136,
  "repository": {
    "type": "git",
    "url": "git+ssh://git@github.com/qgis/qwc2.git"
  },
  "scripts": {
    "analyze": "webpack --mode production --progress --env ANALYZE=1",
    "build": "npm run prod",
    "dist": "./scripts/dist.sh",
    "iconfont": "node scripts/makeIconkit.js",
    "plugindoc": "node scripts/gen-plugin-docs.js",
    "preinstall": "node -e \"const ua=process.env.npm_config_user_agent||''; if(ua.startsWith('yarn/')){console.error('This project uses npm. Run npm install instead.'); process.exit(1)}\"",
    "prod": "npm run tsupdate && npm run themesconfig && npm run iconfont && webpack --mode production --progress",
    "release": "node -e \"process.exit(require('os').platform() === 'win32' ? 0 : 1)\" && scripts\\package-commands.bat release || ./scripts/package-commands.sh release",
    "start": "npm run tsupdate && npm run themesconfig && npm run iconfont && webpack serve --mode development --progress --host 0.0.0.0 --port 8081",
    "themesconfig": "node scripts/themesConfig.js || :",
    "tsupdate": "node scripts/updateTranslations.js"
  },
  "signal_details": {
    "_amplifiers": [
      "install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)"
    ],
    "install_script_payload": "install/lifecycle script matches payload regex",
    "new_install_script": "first time ['preinstall'] present",
    "shared_repo_different_publisher": "repo 'git+ssh://git@github.com/qgis/qwc2.git' also claimed by 1 package(s) under different publishers: ['npm/qwc2-lts']"
  },
  "time": {
    "created": "2025-04-02T13:52:53.911Z",
    "modified": "2026-07-19T09:47:36.914Z"
  }
}