BEACON

← candidates

npm qwc2 @2026.7.30

score
0.95 high
flagged 2026-07-30 11:50
signals by category
content 1 topology 1

maintainers added: —

package profile →

Signals fired

signalweightrationale
content
install_script_payload 1.0 install/lifecycle script matches payload regex
topology
shared_repo_different_publisher 0.9 repo 'git+ssh://git@github.com/qgis/qwc2.git' also claimed by 1 package(s) under different publishers: ['npm/qwc2-lts']

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "manisandro"
  ],
  "versions": 136
}

Evidence (package doc at flag time)

{
  "dependencies_count": 87,
  "dist": {
    "integrity": "sha512-okcTDyDDH+qSzZR3ecDLaiCEIXIyKPVN5+D2a0SAP/JteqbfeRaIVOYdJBnPbPdsrt62Ap5723ubn1jkwdx1Ug==",
    "tarball": "https://registry.npmjs.org/qwc2/-/qwc2-2026.7.30.tgz",
    "unpackedSize": 5625182
  },
  "dist-tags": {
    "latest": "2026.7.30"
  },
  "latest_version": "2026.7.30",
  "maintainers": [
    {
      "email": "manisandro@gmail.com",
      "name": "manisandro"
    }
  ],
  "num_versions": 138,
  "repository": {
    "type": "git",
    "url": "git+ssh://git@github.com/qgis/qwc2.git"
  },
  "scripts": {
    "analyze": "webpack --mode production --progress --env ANALYZE=1",
    "build": "npm run prod",
    "dist": "./scripts/dist.sh",
    "iconfont": "node scripts/makeIconkit.js",
    "plugindoc": "node scripts/gen-plugin-docs.js",
    "preinstall": "node -e \"const ua=process.env.npm_config_user_agent||''; if(ua.startsWith('yarn/')){console.error('This project uses npm. Run npm install instead.'); process.exit(1)}\"",
    "prod": "npm run tsupdate && npm run themesconfig && npm run iconfont && webpack --mode production --progress",
    "release": "node -e \"process.exit(require('os').platform() === 'win32' ? 0 : 1)\" && scripts\\package-commands.bat release || ./scripts/package-commands.sh release",
    "start": "npm run tsupdate && npm run themesconfig && npm run iconfont && webpack serve --mode development --progress --host 0.0.0.0 --port 8081",
    "themesconfig": "node scripts/themesConfig.js || :",
    "tsupdate": "node scripts/updateTranslations.js"
  },
  "signal_details": {
    "install_script_payload": "install/lifecycle script matches payload regex",
    "shared_repo_different_publisher": "repo 'git+ssh://git@github.com/qgis/qwc2.git' also claimed by 1 package(s) under different publishers: ['npm/qwc2-lts']"
  },
  "time": {
    "created": "2025-04-02T13:52:53.911Z",
    "modified": "2026-07-30T16:50:18.704Z"
  }
}