npm @dcl/sdk-commands @7.25.0
score
0.7
high
flagged
2026-07-30 13:23
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=7.25.0 but max published is 7.25.1-30310486734.commit-5ffe873 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/decentraland/js-sdk-toolchain.git' also claimed by 5 package(s) under different publishers: ['npm/@dcl/react-ecs', 'npm/@dcl/js-runtime', 'npm/@dcl/sdk'] ... |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"decentralandbot",
"imazzara"
],
"versions": 1043
}
Evidence (package doc at flag time)
{
"dependencies_count": 36,
"dist": {
"integrity": "sha512-+c5myy+myUfQv7JfbVppOebEQeDz7PvkSyiYUJZ3deSjM+mhY0FRDlUj9s3O0k5qTU9rMotskomCPNkMmb7vZw==",
"tarball": "https://registry.npmjs.org/@dcl/sdk-commands/-/sdk-commands-7.25.0.tgz",
"unpackedSize": 621030
},
"dist-tags": {
"auth-server": "7.25.1-30310486734.commit-5ffe873",
"ci": "7.8.16",
"experimental": "7.25.1-30447792919.commit-c06a494",
"latest": "7.25.0",
"next": "7.25.1-30540108605.commit-82368ee",
"protocol-squad": "7.24.5-29255693632.commit-d9d75fe"
},
"latest_version": "7.25.0",
"maintainers": [
{
"email": "developers+npm@decentraland.org",
"name": "decentralandbot"
},
{
"email": "nachomazzara@gmail.com",
"name": "imazzara"
}
],
"num_versions": 1043,
"repository": {
"directory": "packages/@dcl/sdk-commands",
"url": "git+https://github.com/decentraland/js-sdk-toolchain.git"
},
"scripts": {
"build": "tsc -p tsconfig.json && rm -rf dist/locales && cp -r src/locales dist/locales && cp src/logic/*.template src/logic/runtime-script.ts dist/logic/",
"postinstall": "node scripts/postinstall.js",
"start": "tsc -p tsconfig.json --watch && rm -rf dist/locales && cp -r src/locales dist/locales"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=7.25.0 but max published is 7.25.1-30310486734.commit-5ffe873",
"shared_repo_different_publisher": "repo 'git+https://github.com/decentraland/js-sdk-toolchain.git' also claimed by 5 package(s) under different publishers: ['npm/@dcl/react-ecs', 'npm/@dcl/js-runtime', 'npm/@dcl/sdk'] ..."
},
"time": {
"created": "2023-02-19T20:14:38.825Z",
"modified": "2026-07-30T11:52:45.884Z"
}
}