npm @expo/fingerprint @0.21.9
score
0.875
high
flagged
2026-11-06 01:11
amplifiers
co-occurring signal pairs that lift the final score
- repository_url_changed + maintainer_churn: repo ownership claim shifted during identity churn (+0.10)
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| maintainer_churn | 1.0 | added: ['ccheever', 'szdziedzic'] |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.21.9 but max published is 1.0.0-canary-20240927-ab8a962 |
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/expo/expo.git' also claimed by 10 package(s) under different publishers: ['npm/expo-notifications', 'npm/expo-barcode-scanner-interface', 'npm/expo-sensors-interface'] ... |
| repository_url_changed | 0.7 | 'git+https://github.com/expo/expo.git' -> 'https://github.com/expo/expo.git' |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"ide",
"brentvatne",
"expoadmin",
"exponent",
"bycedric",
"kudochien",
"alanhughes",
"tsapeta",
"expo-bot",
"philpl",
"wschurman"
],
"versions": 239
}
Evidence (package doc at flag time)
{
"dependencies_count": 11,
"dist": {
"integrity": "sha512-Z2xIFc/lvZZnDamAyd9uWUUctoT6uzAYOLAUqiZ2pT6mkDFistVsLd/5XCrD5/W3pUY65GLxmOal6+vyyzo0Dg==",
"tarball": "https://registry.npmjs.org/@expo/fingerprint/-/fingerprint-0.21.9.tgz",
"unpackedSize": 305285
},
"dist-tags": {
"canary": "1.0.0-canary-20260909-ea7a89a",
"canary-sdk-55": "0.17.0-canary-20260429-a5e59cf",
"canary-sdk-56": "1.0.0-canary-20260701-9100865",
"latest": "0.21.9",
"next": "0.21.5",
"sdk-50": "0.6.0",
"sdk-51": "0.8.0",
"sdk-54": "0.15.5",
"sdk-55": "0.16.8",
"sdk-56": "0.19.10",
"sdk-57": "0.20.15"
},
"latest_version": "0.21.9",
"maintainers": [
{
"email": "ide+npm@jameside.com",
"name": "ide"
},
{
"email": "brentvatne@gmail.com",
"name": "brentvatne"
},
{
"email": "support@expo.io",
"name": "expoadmin"
},
{
"email": "exponent.team@gmail.com",
"name": "exponent"
},
{
"email": "me@bycedric.com",
"name": "bycedric"
},
{
"email": "ckchien@gmail.com",
"name": "kudochien"
},
{
"email": "hughesno1@gmail.com",
"name": "alanhughes"
},
{
"email": "npm@tsapeta.com",
"name": "tsapeta"
},
{
"email": "brent+expobotnpm@expo.io",
"name": "expo-bot"
},
{
"email": "phil@kitten.sh",
"name": "philpl"
},
{
"email": "ccheever@gmail.com",
"name": "ccheever"
},
{
"email": "sz.dziedz@gmail.com",
"name": "szdziedzic"
},
{
"email": "wschurman@gmail.com",
"name": "wschurman"
}
],
"num_versions": 263,
"repository": {
"directory": "packages/@expo/fingerprint",
"type": "git",
"url": "https://github.com/expo/expo.git"
},
"scripts": {
"build": "pnpm run build:lib && pnpm run build:cli",
"build:cli": "expo-build --base cli cjs:src",
"build:lib": "expo-build cjs:src",
"clean": "expo-module clean",
"depscheck": "expo-module depscheck",
"expo-module": "expo-module",
"format": "expo-module format",
"lint": "oxlint --config oxlint.config.mjs .",
"pretest:e2e": "expo-module prepublishOnly",
"test": "jest",
"test:e2e": "jest --config e2e/jest.config.js",
"typecheck": "tsc -b tsconfig.all.json"
},
"signal_details": {
"_amplifiers": [
"repository_url_changed + maintainer_churn: repo ownership claim shifted during identity churn (+0.10)"
],
"dist_tag_anomaly": "dist-tags.latest=0.21.9 but max published is 1.0.0-canary-20240927-ab8a962",
"maintainer_churn": "added: ['ccheever', 'szdziedzic']",
"repository_url_changed": "'git+https://github.com/expo/expo.git' -> 'https://github.com/expo/expo.git'",
"shared_repo_different_publisher": "repo 'https://github.com/expo/expo.git' also claimed by 10 package(s) under different publishers: ['npm/expo-notifications', 'npm/expo-barcode-scanner-interface', 'npm/expo-sensors-interface'] ..."
},
"time": {
"created": "2022-12-09T16:21:59.777Z",
"modified": "2026-11-05T09:34:18.355Z"
}
}