npm @graphql-tools/merge @10.0.8
score
0.7
high
flagged
2026-11-09 11:19
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=10.0.8 but max published is 11.0.0-alpha-20261025201602-645ba73bc463ee5eb011d83bc6ee2f665e26467c |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/ardatan/graphql-tools.git' also claimed by 10 package(s) under different publishers: ['npm/@graphql-tools/graphql-tag-pluck', 'npm/@graphql-tools/relay-operation-optimizer', 'npm/@graphql-tools/executor-legacy-ws'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"dotansimha",
"urigo",
"ardatan",
"enisdenjo",
"theguild-bot"
],
"versions": 1876
}
Evidence (package doc at flag time)
{
"dependencies_count": 2,
"dist": {
"integrity": "sha512-iQlmBLu6QAhQb23LUYUHlQeZzH7Axi2xtPpVj8AWd5ALrt+a5w0Lf6p/xHgWg2EzSI2LcxdGXArGWs4RZFfF8g==",
"tarball": "https://registry.npmjs.org/@graphql-tools/merge/-/merge-10.0.8.tgz",
"unpackedSize": 121965
},
"dist-tags": {
"alpha": "10.0.9-alpha-20261109171258-48206d53c0280229df2865bf4a03b474e6b6aa15",
"beta": "6.2.15-alpha-e6320b00.0",
"canary": "6.2.4-alpha-dee550e0.0",
"latest": "10.0.8",
"next": "6.0.0-alpha.2",
"rc": "10.0.7-rc-20261026131423-8fabaf53c1774b23fb7f57b7dadfe5d6b5213dac"
},
"latest_version": "10.0.8",
"maintainers": [
{
"email": "dotan@the-guild.dev",
"name": "dotansimha"
},
{
"email": "uri.goldshtein@gmail.com",
"name": "urigo"
},
{
"email": "ardatanrikulu@gmail.com",
"name": "ardatan"
},
{
"email": "badurinadenis@gmail.com",
"name": "enisdenjo"
},
{
"email": "bot@the-guild.dev",
"name": "theguild-bot"
}
],
"num_versions": 1879,
"repository": {
"directory": "packages/merge",
"type": "git",
"url": "git+https://github.com/ardatan/graphql-tools.git"
},
"scripts": null,
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=10.0.8 but max published is 11.0.0-alpha-20261025201602-645ba73bc463ee5eb011d83bc6ee2f665e26467c",
"shared_repo_different_publisher": "repo 'git+https://github.com/ardatan/graphql-tools.git' also claimed by 10 package(s) under different publishers: ['npm/@graphql-tools/graphql-tag-pluck', 'npm/@graphql-tools/relay-operation-optimizer', 'npm/@graphql-tools/executor-legacy-ws'] ..."
},
"time": {
"created": "2020-04-29T09:18:55.936Z",
"modified": "2026-11-09T17:15:31.263Z"
}
}