npm nx @24.0.6
score
0.8
high
flagged
2026-11-13 14:04
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=24.0.6 but max published is 24.1.0-beta.0 |
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/nrwl/nx.git' also claimed by 10 package(s) under different publishers: ['npm/@nx/playwright', 'npm/@nx/node', 'npm/@nx/nx-linux-arm64-gnu'] ... |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"jack-nrwl",
"meeroslav",
"nrwlowner",
"nrwl-jason",
"juristr",
"altan-nrwl",
"jameshenry",
"vsavkin"
],
"versions": 2733
}
Evidence (package doc at flag time)
{
"dependencies_count": 88,
"dist": {
"integrity": "sha512-d/8V/yPOqAYPjtbwydBrzlksQ72eWr+Hw5TJoMuyIwF5KJH0xr2OCCzUlxIAxpe20cZKDk5ftGEspZ2Si7wgsg==",
"tarball": "https://registry.npmjs.org/nx/-/nx-24.0.6.tgz",
"unpackedSize": 21476218
},
"dist-tags": {
"canary": "24.1.0-canary.20261113-51292c7",
"latest": "24.0.6",
"next": "24.1.0-beta.0",
"previous": "23.3.2",
"pull-request": "24.0.0-pr.37405.acdaf31"
},
"latest_version": "24.0.6",
"maintainers": [
{
"email": "jack@nrwl.io",
"name": "jack-nrwl"
},
{
"email": "missing.manual@gmail.com",
"name": "meeroslav"
},
{
"email": "victor@nrwl.io",
"name": "nrwlowner"
},
{
"email": "jason@nrwl.io",
"name": "nrwl-jason"
},
{
"email": "juri.strumpflohner@gmail.com",
"name": "juristr"
},
{
"email": "altan@nrwl.io",
"name": "altan-nrwl"
},
{
"email": "james@henry.sc",
"name": "jameshenry"
},
{
"email": "avix1000@gmail.com",
"name": "vsavkin"
}
],
"num_versions": 2736,
"repository": {
"directory": "packages/nx",
"type": "git",
"url": "https://github.com/nrwl/nx.git"
},
"scripts": {
"postinstall": "node -e \"try{require('./dist/bin/post-install')}catch(e){}\""
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=24.0.6 but max published is 24.1.0-beta.0",
"install_script_payload": "install/lifecycle script matches payload regex",
"shared_repo_different_publisher": "repo 'https://github.com/nrwl/nx.git' also claimed by 10 package(s) under different publishers: ['npm/@nx/playwright', 'npm/@nx/node', 'npm/@nx/nx-linux-arm64-gnu'] ..."
},
"time": {
"created": "2011-08-08T05:06:23.816Z",
"modified": "2026-11-13T20:03:57.245Z"
}
}