BEACON

← candidates

npm @firebase/installations-compat @0.2.22

score
0.7333 high
flagged 2026-07-30 13:28
signals by category
topology 3

maintainers added: —

package profile →

Signals fired

signalweightrationale
topology
dist_tag_anomaly 0.5 dist-tags.latest=0.2.22 but max published is 0.2.23-20260728185501
mass_publish_burst 0.8 publisher 'google-wombot' pushed 19 packages in the last 15min on npm
shared_repo_different_publisher 0.9 repo 'git+https://github.com/firebase/firebase-js-sdk.git' also claimed by 8 package(s) under different publishers: ['npm/@depup/firebase__performance', 'npm/@depup/firebase__messaging', 'npm/@depup/firebase__remote-config'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "firebase-ops",
    "feiyang.chen",
    "google-wombot",
    "chholland"
  ],
  "versions": 1460
}

Evidence (package doc at flag time)

{
  "dependencies_count": 5,
  "dist": {
    "integrity": "sha512-C/zpAuTP5S9OgKSPvXRupw3hoY/JZSlA1wFjD/Sb7LIQE0FNbcMdO8Y4KXVEkjVzma/DDDDIAzxEXqKMAzc88w==",
    "tarball": "https://registry.npmjs.org/@firebase/installations-compat/-/installations-compat-0.2.22.tgz",
    "unpackedSize": 26162
  },
  "dist-tags": {
    "auth-redirect-credentials": "0.2.13-auth-redirect-credentials.b424e5897",
    "beta": "0.0.900-exp.8b4d7550f",
    "caching-fdc": "0.2.19-caching-fdc.9f17eac6e",
    "canary": "0.2.21-canary.bfb9accdc",
    "dataconnect-preview": "0.2.8-dataconnect-preview.d986d4bf2",
    "eap-ai-hybridinference": "0.2.14-eap-ai-hybridinference.58d92df33",
    "eap-crashlytics": "0.2.22-eap-crashlytics.659b578fb",
    "eap-firestore-backfiller": "0.2.7-eap-firestore-backfiller.87babf60c",
    "eap-firestore-pipelines": "0.2.19-eap-firestore-pipelines.2.e4cdd2e06",
    "eap-vertexai-hybgoog": "0.2.13-eap-vertexai-hybgoog.31261ca31",
    "eap-vertexai-hybridinference": "0.2.13-eap-vertexai-hybridinference.e83974308",
    "exp": "0.0.900-exp.f6733b13b",
    "firebase-studio-sdk-integration": "0.2.19-firebase-studio-sdk-integration.556d1bed2",
    "latest": "0.2.22",
    "next": "0.2.23-20260728185501",
    "passkey-preview": "0.2.6-passkey-preview.103ead202",
    "pr5646": "0.1.2-pr5646.2abc5e854",
    "ssl-check": "0.2.13-ssl-check.4f23f3343",
    "vertex-preview": "0.2.6-vertex-preview.8b70fc586",
    "vertexai-preview": "0.2.9-vertexai-preview.6b035b7d3"
  },
  "latest_version": "0.2.22",
  "maintainers": [
    {
      "email": "operations+plainlogo@firebase.com",
      "name": "firebase-ops"
    },
    {
      "email": "feiyang.chen1@gmail.com",
      "name": "feiyang.chen"
    },
    {
      "email": "node-team-npm+wombot@google.com",
      "name": "google-wombot"
    },
    {
      "email": "chholland@google.com",
      "name": "chholland"
    }
  ],
  "num_versions": 1460,
  "repository": {
    "directory": "packages/installations-compat",
    "type": "git",
    "url": "git+https://github.com/firebase/firebase-js-sdk.git"
  },
  "scripts": {
    "build": "rollup -c",
    "build:deps": "lerna run --scope @firebase/installations-compat --include-dependencies build",
    "build:release": "rollup -c rollup.config.release.js",
    "dev": "rollup -c -w",
    "lint": "eslint -c .eslintrc.js '**/*.ts' --ignore-path '../../.gitignore'",
    "lint:fix": "eslint --fix -c .eslintrc.js '**/*.ts' --ignore-path '../../.gitignore'",
    "serve": "yarn serve:build && yarn serve:host",
    "serve:build": "rollup -c test-app/rollup.config.js",
    "serve:host": "http-server -c-1 test-app",
    "test": "yarn type-check && yarn test:karma && yarn lint",
    "test:ci": "node ../../scripts/run_tests_in_ci.js",
    "test:debug": "karma start --browsers=Chrome --auto-watch",
    "test:karma": "karma start",
    "trusted-type-check": "tsec -p tsconfig.json --noEmit",
    "type-check": "tsc -p . --noEmit"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=0.2.22 but max published is 0.2.23-20260728185501",
    "mass_publish_burst": "publisher 'google-wombot' pushed 19 packages in the last 15min on npm",
    "shared_repo_different_publisher": "repo 'git+https://github.com/firebase/firebase-js-sdk.git' also claimed by 8 package(s) under different publishers: ['npm/@depup/firebase__performance', 'npm/@depup/firebase__messaging', 'npm/@depup/firebase__remote-config'] ..."
  },
  "time": {
    "created": "2021-01-21T22:54:56.351Z",
    "modified": "2026-07-28T19:05:12.518Z"
  }
}