npm nodemailer @10.3.1
score
0.6333
med
flagged
2026-11-06 01:07
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| script_count_spike | 0.5 | scripts count 8 -> 16 |
| size_spike | 0.5 | unpackedSize 567393 -> 1763299 (3.1×) |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/nodemailer/nodemailer.git' also claimed by 1 package(s) under different publishers: ['npm/@depup/nodemailer'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"andris"
],
"versions": 301
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-uF0AFsJC07Y1vdW7p580DKAnh7rAO+4UPSSB3mDCPNDufoiaOebV6JmrzpxB14OjEEEiBsNdYoM2Y+fN8M7BBA==",
"tarball": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.3.1.tgz",
"unpackedSize": 1763299
},
"dist-tags": {
"beta": "2.4.0-beta.0",
"latest": "10.3.1"
},
"latest_version": "10.3.1",
"maintainers": [
{
"email": "andris@kreata.ee",
"name": "andris"
}
],
"num_versions": 337,
"repository": {
"type": "git",
"url": "git+https://github.com/nodemailer/nodemailer.git"
},
"scripts": {
"build": "node scripts/build.js",
"format": "prettier --write \"**/*.{js,cjs,ts,json,md}\"",
"format:check": "prettier --check \"**/*.{js,cjs,ts,json,md}\"",
"lint": "eslint . && npm run typecheck",
"lint:fix": "eslint . --fix",
"prepare": "npm run build",
"pretest": "npm run build",
"pretest:bun": "npm run build",
"pretest:cjs": "npm run build",
"pretest:coverage": "npm run build",
"test": "node --import tsx --test --test-concurrency=1 $(find test \\( -name '*-test.ts' -o -name '*.test.ts' \\))",
"test:bun": "bun test --timeout 60000 $(find ./test \\( -name '*-test.ts' -o -name '*.test.ts' \\))",
"test:cjs": "NODE_OPTIONS=--no-experimental-require-module node test/package/cjs-smoke.cjs",
"test:coverage": "c8 node --import tsx --test --test-concurrency=1 $(find test \\( -name '*-test.ts' -o -name '*.test.ts' \\))",
"typecheck": "node scripts/build.js --generate-only && tsc -p tsconfig.json",
"update": "rm -rf node_modules/ package-lock.json && ncu -u && npm install"
},
"signal_details": {
"script_count_spike": "scripts count 8 -> 16",
"shared_repo_different_publisher": "repo 'git+https://github.com/nodemailer/nodemailer.git' also claimed by 1 package(s) under different publishers: ['npm/@depup/nodemailer']",
"size_spike": "unpackedSize 567393 -> 1763299 (3.1\u00d7)"
},
"time": {
"created": "2011-01-21T19:27:03.164Z",
"modified": "2026-10-29T12:31:36.588Z"
}
}