BEACON

← candidates

npm @actual-app/sync-server @26.6.0

score
0.7 high
flagged 2026-06-05 10:03
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
dist_tag_anomaly 0.5 dist-tags.latest=26.6.0 but max published is 26.7.0-nightly.20260602
shared_repo_different_publisher 0.9 repo 'git+https://github.com/actualbudget/actual.git' also claimed by 4 package(s) under different publishers: ['npm/@actual-app/web', 'npm/@actual-app/cli', 'npm/@actual-app/api'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "actual-app-user",
    "matissjanis",
    "dolphish",
    "joeljeremy",
    "matt-fidd",
    "actualbudget"
  ],
  "versions": 385
}

Evidence (package doc at flag time)

{
  "dependencies_count": 18,
  "dist": {
    "integrity": "sha512-XGFVj9rlRZTPYruOBmokgcEf596F7QISLV/wgGJCPzc7ePSactqpaiCYKPEeEKUBs0ouqKQKklfc3+jAQWEaDA==",
    "tarball": "https://registry.npmjs.org/@actual-app/sync-server/-/sync-server-26.6.0.tgz",
    "unpackedSize": 705795
  },
  "dist-tags": {
    "latest": "26.6.0",
    "nightly": "26.7.0-nightly.20260605"
  },
  "latest_version": "26.6.0",
  "maintainers": [
    {
      "email": "help@actualbudget.com",
      "name": "actual-app-user"
    },
    {
      "email": "npmjs.org@mja.lv",
      "name": "matissjanis"
    },
    {
      "email": "julian.dominguezschatz@gmail.com",
      "name": "dolphish"
    },
    {
      "email": "joeljeremy.marquez@gmail.com",
      "name": "joeljeremy"
    },
    {
      "email": "npm@m.fiddaman.uk",
      "name": "matt-fidd"
    },
    {
      "email": "dev@actualbudget.org",
      "name": "actualbudget"
    }
  ],
  "num_versions": 385,
  "repository": {
    "directory": "packages/sync-server",
    "type": "git",
    "url": "git+https://github.com/actualbudget/actual.git"
  },
  "scripts": {
    "build": "vite build",
    "db:downgrade": "yarn build && cross-env NODE_ENV=development node build/scripts/run-migrations.js down",
    "db:migrate": "yarn build && cross-env NODE_ENV=development node build/scripts/run-migrations.js up",
    "db:test-downgrade": "yarn build && cross-env NODE_ENV=test node build/scripts/run-migrations.js down",
    "db:test-migrate": "yarn build && cross-env NODE_ENV=test node build/scripts/run-migrations.js up",
    "disable-openid": "yarn build && node build/scripts/disable-openid.js",
    "health-check": "yarn build && node build/scripts/health-check.js",
    "reset-password": "yarn build && node build/scripts/reset-password.js",
    "start": "yarn build && node build/app.js",
    "start-monitor": "nodemon --exec 'yarn build && node build/app.js' --ignore './build/**/*' --ext 'ts,js' build/app.js",
    "test": "NODE_ENV=test NODE_OPTIONS='--experimental-vm-modules --trace-warnings' vitest --run",
    "typecheck": "tsgo -b && tsc-strict"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=26.6.0 but max published is 26.7.0-nightly.20260602",
    "shared_repo_different_publisher": "repo 'git+https://github.com/actualbudget/actual.git' also claimed by 4 package(s) under different publishers: ['npm/@actual-app/web', 'npm/@actual-app/cli', 'npm/@actual-app/api'] ..."
  },
  "time": {
    "created": "2025-04-13T21:26:03.336Z",
    "modified": "2026-06-05T00:17:36.960Z"
  }
}