npm @copilotkit/sdk-js @1.59.5
score
0.7
high
flagged
2026-06-05 10:25
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=1.59.5 but max published is 2.0.0-next.1 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/CopilotKit/CopilotKit.git' also claimed by 10 package(s) under different publishers: ['npm/@copilotkit/a2ui-renderer', 'npm/@copilotkit/license-verifier', 'npm/@copilotkit/shared'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"copilotkit"
],
"versions": 840
}
Evidence (package doc at flag time)
{
"dependencies_count": 2,
"dist": {
"integrity": "sha512-npVsu3XHt2wo4dkoPlBv6NlnyoIRW4UwnXCj9Cz6mcrP8A7lPaKdpT/rKjfAnW/iP7wSGyK3mjCsOP07lZvoyA==",
"tarball": "https://registry.npmjs.org/@copilotkit/sdk-js/-/sdk-js-1.59.5.tgz",
"unpackedSize": 390185
},
"dist-tags": {
"alpha": "1.59.3-alpha.3",
"beta": "1.50.0-beta.19",
"canary": "1.58.0-canary.thread-id-propagation",
"coagents-v0-3": "1.5.0-coagents-v0-3.0",
"custom-tag-pre": "1.5.1-custom-tag-pre.0",
"latest": "1.59.5",
"mme-lgc-langgraph-package": "1.3.16-mme-lgc-langgraph-package.11",
"mme-reset-chat": "1.3.16-mme-reset-chat.11",
"mme-revert-rxjs-changes": "1.3.16-mme-revert-rxjs-changes.10",
"mme-sdk-js": "1.3.16-mme-sdk-js.1",
"next": "1.55.2-next.1",
"no-pino-redact": "1.4.8-no-pino-redact.1",
"pr": "0.0.0-a2ui-v0-9-latest-20260408115931",
"pre": "1.4.3-pre.0",
"pre-1-4-0": "1.4.0-pre-1-4-0.14",
"pre-1-4-0-alpha": "1.4.0-pre-1-4-0-alpha.10",
"test-custom-tag-prerelease-1": "1.5.1-test-custom-tag-prerelease-1.0",
"tyler-reset-chat": "1.4.2-tyler-reset-chat.3"
},
"latest_version": "1.59.5",
"maintainers": [
{
"email": "devops@copilotkit.ai",
"name": "copilotkit"
}
],
"num_versions": 840,
"repository": {
"type": "git",
"url": "git+https://github.com/CopilotKit/CopilotKit.git"
},
"scripts": {
"attw": "attw --pack . --profile node16",
"build": "tsdown",
"check-types": "tsc --noEmit",
"dev": "tsdown --watch",
"link:global": "pnpm link --global",
"publint": "publint .",
"test": "vitest run",
"test:watch": "vitest",
"unlink:global": "pnpm unlink --global"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=1.59.5 but max published is 2.0.0-next.1",
"shared_repo_different_publisher": "repo 'git+https://github.com/CopilotKit/CopilotKit.git' also claimed by 10 package(s) under different publishers: ['npm/@copilotkit/a2ui-renderer', 'npm/@copilotkit/license-verifier', 'npm/@copilotkit/shared'] ..."
},
"time": {
"created": "2024-11-20T13:38:40.552Z",
"modified": "2026-06-05T05:58:05.751Z"
}
}