BEACON

← candidates

npm @supabase/supabase-js @2.107.0

score
0.6667 med
flagged 2026-06-05 09:16
signals by category
cadence 1 topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
version_jump 0.6 latest published major 999.9.2-canary.0 jumps from runner-up 3.0.0-next.29
topology
dist_tag_anomaly 0.5 dist-tags.latest=2.107.0 but max published is 999.9.2-canary.0
shared_repo_different_publisher 0.9 repo 'https://github.com/supabase/supabase-js.git' also claimed by 6 package(s) under different publishers: ['npm/@supabase/postgrest-js', 'npm/@supabase/auth-js', 'npm/@supabase/functions-js'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [],
  "versions": 749
}

Evidence (package doc at flag time)

{
  "dependencies_count": 5,
  "dist": {
    "integrity": "sha512-ChKzdlWVweMUUhr0U79JhMmgm1haS/C5JquaiCDr70JaGARRtjjoY9rkIheXWybXxTSNzRiQs3Sk8IAg1HS3ZA==",
    "tarball": "https://registry.npmjs.org/@supabase/supabase-js/-/supabase-js-2.107.0.tgz",
    "unpackedSize": 646445
  },
  "dist-tags": {
    "beta": "2.107.0-beta.7",
    "canary": "2.108.0-canary.0",
    "latest": "2.107.0",
    "next": "3.0.0-next.29",
    "rc": "2.100.0-rc.0"
  },
  "latest_version": "2.107.0",
  "maintainers": [],
  "num_versions": 749,
  "repository": {
    "directory": "packages/core/supabase-js",
    "type": "git",
    "url": "https://github.com/supabase/supabase-js.git"
  },
  "scripts": {
    "build": "tsdown",
    "build:watch": "tsdown --watch",
    "docs": "typedoc --entryPoints src/index.ts --entryPoints src/cors.ts --out docs/v2",
    "docs:json": "typedoc --entryPoints src/index.ts --entryPoints src/cors.ts --json docs/v2/spec.json --excludeExternals",
    "serve:coverage": "pnpm nx test:coverage supabase-js && pnpm dlx serve test/coverage",
    "test": "npm run test:types && npm run test:run",
    "test:all": "npm run test:types && npm run test:run && npm run test:integration && npm run test:integration:browser",
    "test:bun": "cd test/integration/bun && bun install && bun test",
    "test:cjs": "node test/module-resolution.test.cjs && node test/module-resolution-cors.test.cjs",
    "test:coverage": "jest --runInBand --coverage --testPathIgnorePatterns=\"test/integration|test/deno|\\.[mc]js$\"",
    "test:deno": "cd test/deno && npm run test",
    "test:edge-functions": "cd test/deno && npm run test:edge-functions",
    "test:esm": "node test/module-resolution.test.mjs && node test/module-resolution-cors.test.mjs",
    "test:expo": "cd test/integration/expo && npm test",
    "test:exports": "attw --pack . --ignore-rules no-resolution",
    "test:hermes-compat": "node test/bundle-hermes-compat.test.cjs",
    "test:integration": "jest --runInBand --detectOpenHandles test/integration.test.ts",
    "test:integration:browser": "deno test --allow-all --node-modules-dir=auto test/integration.browser.test.ts",
    "test:module-resolution": "npm run test:exports && npm run test:esm && npm run test:cjs && npm run test:hermes-compat",
    "test:next": "cd test/integration/next && npm test",
    "test:node:playwright": "cd test/integration/node-browser && npm install && cp ../../../dist/umd/supabase.js . && npm run test",
    "test:run": "jest --runInBand --detectOpenHandles",
    "test:types": "tsd --files test/types/index.test-d.ts && tsd --typings dist/cors.d.cts --files test/types/cors.test-d.ts && jsr publish --dry-run --allow-dirty",
    "test:unit": "jest --runInBand --detectOpenHandles test/unit",
    "test:watch": "jest --watch --verbose false --silent false",
    "update:test-deps": "pnpm run update:test-deps:expo && pnpm run update:test-deps:next && pnpm run update:test-deps:deno && pnpm run update:test-deps:bun",
    "update:test-deps:bun": "cd test/integration/bun && bun install",
    "update:test-deps:deno": "cd test/deno && pnpm install --ignore-workspace",
    "update:test-deps:expo": "cd test/integration/expo && pnpm install --ignore-workspace",
    "update:test-deps:next": "cd test/integration/next && pnpm install --ignore-workspace"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=2.107.0 but max published is 999.9.2-canary.0",
    "shared_repo_different_publisher": "repo 'https://github.com/supabase/supabase-js.git' also claimed by 6 package(s) under different publishers: ['npm/@supabase/postgrest-js', 'npm/@supabase/auth-js', 'npm/@supabase/functions-js'] ...",
    "version_jump": "latest published major 999.9.2-canary.0 jumps from runner-up 3.0.0-next.29"
  },
  "time": {
    "created": "2020-01-17T04:37:38.575Z",
    "modified": "2026-06-04T15:54:47.812Z"
  }
}