npm @loaders.gl/images @4.5.4
score
0.687
med
flagged
2026-11-08 11:26
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=4.5.4 but max published is 5.0.0-alpha.1 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/visgl/loaders.gl.git' also claimed by 4 package(s) under different publishers: ['npm/@loaders.gl/loader-utils', 'npm/@loaders.gl/schema', 'npm/@loaders.gl/worker-utils'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"pessimistress",
"kylebarron",
"ibgreen",
"dryabinin",
"belom88",
"dterekhova",
"openjs-operations",
"felixpalmer"
],
"versions": 370
}
Evidence (package doc at flag time)
{
"dependencies_count": 1,
"dist": {
"integrity": "sha512-Z/7SSC9v+iQdcpwkr7nSloCpgAREuO2/3yD4niAhk+ar7nrgRByaiBH16L51M5Juse8MG3oC67gaO85VuUb3jA==",
"tarball": "https://registry.npmjs.org/@loaders.gl/images/-/images-4.5.4.tgz",
"unpackedSize": 201468
},
"dist-tags": {
"1.1-latest": "1.1.7",
"beta": "5.0.0-beta.4",
"latest": "4.5.4",
"v4.5-beta": "4.5.0-alpha.1"
},
"latest_version": "4.5.4",
"maintainers": [
{
"email": "cxiaoji@gmail.com",
"name": "pessimistress"
},
{
"email": "kylebarron2@gmail.com",
"name": "kylebarron"
},
{
"email": "ib@unfolded.ai",
"name": "ibgreen"
},
{
"email": "daniil.ryabinin@actionengine.com",
"name": "dryabinin"
},
{
"email": "belom88@yandex.ru",
"name": "belom88"
},
{
"email": "dasha1024@gmail.com",
"name": "dterekhova"
},
{
"email": "operations@openjsf.org",
"name": "openjs-operations"
},
{
"email": "felixpalmer+npm@gmail.com",
"name": "felixpalmer"
}
],
"num_versions": 370,
"repository": {
"type": "git",
"url": "git+https://github.com/visgl/loaders.gl.git"
},
"scripts": {
"build-bundle": "ocular-bundle ./bundle.ts --output=dist/dist.min.js",
"build-bundle-dev": "ocular-bundle ./bundle.ts --env=dev --output=dist/dist.dev.js",
"pre-build": "npm run build-bundle && npm run build-bundle-dev"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=4.5.4 but max published is 5.0.0-alpha.1",
"shared_repo_different_publisher": "repo 'git+https://github.com/visgl/loaders.gl.git' also claimed by 4 package(s) under different publishers: ['npm/@loaders.gl/loader-utils', 'npm/@loaders.gl/schema', 'npm/@loaders.gl/worker-utils'] ..."
},
"time": {
"created": "2019-02-13T20:53:20.313Z",
"modified": "2026-11-02T19:57:48.364Z"
}
}