npm @supabase/supabase-js @2.107.0
score
0.85
high
flagged
2026-06-05 11:10
signals by category
identity
1
cadence
1
topology
2
maintainers added: etienne_supa, mandarini
amplifiers
co-occurring signal pairs that lift the final score
- version_jump + maintainer_churn: major-version preempt under new identity (+0.10)
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| maintainer_churn | 1.0 | added: ['etienne_supa', 'mandarini'] |
| cadence | ||
| version_jump | 0.6 | latest published major 999.9.2-canary.0 jumps from runner-up 3.0.0-next.29 |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=2.107.0 but max published is 999.9.2-canary.0 |
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/supabase/supabase-js.git' also claimed by 6 package(s) under different publishers: ['npm/@supabase/postgrest-js', 'npm/@supabase/auth-js', 'npm/@supabase/functions-js'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [],
"versions": 749
}
Evidence (package doc at flag time)
{
"dependencies_count": 5,
"dist": {
"integrity": "sha512-ChKzdlWVweMUUhr0U79JhMmgm1haS/C5JquaiCDr70JaGARRtjjoY9rkIheXWybXxTSNzRiQs3Sk8IAg1HS3ZA==",
"tarball": "https://registry.npmjs.org/@supabase/supabase-js/-/supabase-js-2.107.0.tgz",
"unpackedSize": 646445
},
"dist-tags": {
"beta": "2.107.0-beta.7",
"canary": "2.108.0-canary.0",
"latest": "2.107.0",
"next": "3.0.0-next.29",
"rc": "2.100.0-rc.0"
},
"latest_version": "2.107.0",
"maintainers": [
{
"email": "etienne@supabase.io",
"name": "etienne_supa"
},
{
"email": "katerina.skroumpelou@supabase.io",
"name": "mandarini"
}
],
"num_versions": 749,
"repository": {
"directory": "packages/core/supabase-js",
"type": "git",
"url": "https://github.com/supabase/supabase-js.git"
},
"scripts": {
"build": "tsdown",
"build:watch": "tsdown --watch",
"docs": "typedoc --entryPoints src/index.ts --entryPoints src/cors.ts --out docs/v2",
"docs:json": "typedoc --entryPoints src/index.ts --entryPoints src/cors.ts --json docs/v2/spec.json --excludeExternals",
"serve:coverage": "pnpm nx test:coverage supabase-js && pnpm dlx serve test/coverage",
"test": "npm run test:types && npm run test:run",
"test:all": "npm run test:types && npm run test:run && npm run test:integration && npm run test:integration:browser",
"test:bun": "cd test/integration/bun && bun install && bun test",
"test:cjs": "node test/module-resolution.test.cjs && node test/module-resolution-cors.test.cjs",
"test:coverage": "jest --runInBand --coverage --testPathIgnorePatterns=\"test/integration|test/deno|\\.[mc]js$\"",
"test:deno": "cd test/deno && npm run test",
"test:edge-functions": "cd test/deno && npm run test:edge-functions",
"test:esm": "node test/module-resolution.test.mjs && node test/module-resolution-cors.test.mjs",
"test:expo": "cd test/integration/expo && npm test",
"test:exports": "attw --pack . --ignore-rules no-resolution",
"test:hermes-compat": "node test/bundle-hermes-compat.test.cjs",
"test:integration": "jest --runInBand --detectOpenHandles test/integration.test.ts",
"test:integration:browser": "deno test --allow-all --node-modules-dir=auto test/integration.browser.test.ts",
"test:module-resolution": "npm run test:exports && npm run test:esm && npm run test:cjs && npm run test:hermes-compat",
"test:next": "cd test/integration/next && npm test",
"test:node:playwright": "cd test/integration/node-browser && npm install && cp ../../../dist/umd/supabase.js . && npm run test",
"test:run": "jest --runInBand --detectOpenHandles",
"test:types": "tsd --files test/types/index.test-d.ts && tsd --typings dist/cors.d.cts --files test/types/cors.test-d.ts && jsr publish --dry-run --allow-dirty",
"test:unit": "jest --runInBand --detectOpenHandles test/unit",
"test:watch": "jest --watch --verbose false --silent false",
"update:test-deps": "pnpm run update:test-deps:expo && pnpm run update:test-deps:next && pnpm run update:test-deps:deno && pnpm run update:test-deps:bun",
"update:test-deps:bun": "cd test/integration/bun && bun install",
"update:test-deps:deno": "cd test/deno && pnpm install --ignore-workspace",
"update:test-deps:expo": "cd test/integration/expo && pnpm install --ignore-workspace",
"update:test-deps:next": "cd test/integration/next && pnpm install --ignore-workspace"
},
"signal_details": {
"_amplifiers": [
"version_jump + maintainer_churn: major-version preempt under new identity (+0.10)"
],
"dist_tag_anomaly": "dist-tags.latest=2.107.0 but max published is 999.9.2-canary.0",
"maintainer_churn": "added: ['etienne_supa', 'mandarini']",
"shared_repo_different_publisher": "repo 'https://github.com/supabase/supabase-js.git' also claimed by 6 package(s) under different publishers: ['npm/@supabase/postgrest-js', 'npm/@supabase/auth-js', 'npm/@supabase/functions-js'] ...",
"version_jump": "latest published major 999.9.2-canary.0 jumps from runner-up 3.0.0-next.29"
},
"time": {
"created": "2020-01-17T04:37:38.575Z",
"modified": "2026-06-05T14:39:48.029Z"
}
}