npm @firebase/webchannel-wrapper @1.0.7
score
0.9
high
flagged
2026-11-06 01:13
signals by category
identity
1
topology
2
maintainers added: ajp.google, lahirumaramba.google
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| maintainer_churn | 1.0 | added: ['ajp.google', 'lahirumaramba.google'] |
| topology | ||
| mass_publish_burst | 0.8 | publisher 'google-wombot' pushed 60 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/firebase/firebase-js-sdk.git' also claimed by 4 package(s) under different publishers: ['npm/@depup/firebase__component', 'npm/@depup/firebase__database-compat', 'npm/@depup/firebase__app-compat'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"firebase-ops",
"feiyang.chen",
"google-wombot",
"chholland"
],
"versions": 3451
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-phBFwieDLvkZGYN9CE9ZFNEIoBVksprzsnCzQejCmCHtgwCXReeuRpoEGN9C4EbhONztv8NRV1tau6Rb9pONwQ==",
"tarball": "https://registry.npmjs.org/@firebase/webchannel-wrapper/-/webchannel-wrapper-1.0.7.tgz",
"unpackedSize": 355833
},
"dist-tags": {
"BundlePrerelease": "0.4.1-BundlePrerelease.b662f8c0a",
"auth-redirect-credentials": "1.0.3-auth-redirect-credentials.b424e5897",
"caching-fdc": "1.0.5-caching-fdc.9f17eac6e",
"canary": "1.0.5-canary.bfb9accdc",
"dataconnect-preview": "1.0.1-dataconnect-preview.d986d4bf2",
"eap-ai-hybridinference": "1.0.3-eap-ai-hybridinference.58d92df33",
"eap-auth-emulator": "0.3.0-eap-auth-emulator.df41ee388",
"eap-crashlytics": "1.0.7-eap-crashlytics.d474e7535",
"eap-firestore-backfiller": "1.0.0-eap-firestore-backfiller.87babf60c",
"eap-firestore-debug": "0.4.1-1.0.0-eap-firestore-debug.9c6096f43",
"eap-firestore-pipelines": "1.0.5-eap-firestore-pipelines.2.e4cdd2e06",
"eap-sql": "1.0.7-eap-sql.49c10c82f",
"eap-storage-emulator": "0.4.1-eap-storage-emulator.ed256f582",
"eap-vertexai-hybgoog": "1.0.3-eap-vertexai-hybgoog.31261ca31",
"eap-vertexai-hybridinference": "1.0.3-eap-vertexai-hybridinference.e83974308",
"exp-types-exploration": "0.5.1-8.9.1-exp-types-exploration.635c9e3fd",
"firebase-studio-sdk-integration": "1.0.4-firebase-studio-sdk-integration.556d1bed2",
"firestore-bundles-alpha": "0.3.0-alpha.96ae6a5fe",
"latest": "1.0.7",
"longpoll": "0.4.1-longpoll.66863f547",
"next": "1.0.7-20260818172054",
"passkey-preview": "0.10.6-passkey-preview.103ead202",
"pr5646": "0.6.0-pr5646.2abc5e854",
"ssl-check": "1.0.3-ssl-check.4f23f3343",
"vertex-preview": "0.10.6-vertex-preview.8b70fc586",
"vertexai-preview": "1.0.1-vertexai-preview.6b035b7d3"
},
"latest_version": "1.0.7",
"maintainers": [
{
"email": "firebase-npm@google.com",
"name": "firebase-ops"
},
{
"email": "feiyang.chen1@gmail.com",
"name": "feiyang.chen"
},
{
"email": "node-team-npm+wombot@google.com",
"name": "google-wombot"
},
{
"email": "chholland@google.com",
"name": "chholland"
},
{
"email": "lahirumaramba@google.com",
"name": "lahirumaramba.google"
},
{
"email": "ajp@google.com",
"name": "ajp.google"
}
],
"num_versions": 3460,
"repository": {
"directory": "packages/webchannel-wrapper",
"type": "git",
"url": "git+https://github.com/firebase/firebase-js-sdk.git"
},
"scripts": {
"build": "rollup -c",
"dev": "rollup -c -w",
"test": "echo 'No test suite for webchannel-wrapper'",
"test:ci": "echo 'No test suite for webchannel-wrapper'",
"trusted-type-check": "tsec -p tsconfig.json --noEmit"
},
"signal_details": {
"maintainer_churn": "added: ['ajp.google', 'lahirumaramba.google']",
"mass_publish_burst": "publisher 'google-wombot' pushed 60 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/firebase/firebase-js-sdk.git' also claimed by 4 package(s) under different publishers: ['npm/@depup/firebase__component', 'npm/@depup/firebase__database-compat', 'npm/@depup/firebase__app-compat'] ..."
},
"time": {
"created": "2017-09-20T22:02:08.468Z",
"modified": "2026-11-05T21:26:11.585Z"
}
}