npm usb @2.18.0
score
0.75
high
flagged
2026-06-06 12:29
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| typosquat | 1.0 | lev=1 to watched 'sb' |
| dist_tag_anomaly | 0.5 | dist-tags.latest=2.18.0 but max published is 3.0.0-alpha.1 |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"kevinmehall",
"tcr",
"thegecko"
],
"versions": 105
}
Evidence (package doc at flag time)
{
"dependencies_count": 3,
"dist": {
"integrity": "sha512-klAJPUTaSxRvTgrIh7om6UTrgRxdzioD+rJc/MaoiN8+OGdqRzai39tR00asnoCesPNikItWB9zBZoo0pJsWaA==",
"tarball": "https://registry.npmjs.org/usb/-/usb-2.18.0.tgz",
"unpackedSize": 6956797
},
"dist-tags": {
"alpha": "2.5.2-alpha.1",
"latest": "2.18.0",
"libusb": "1.8.1-libusb.6",
"next": "3.0.0-alpha.6",
"oldlibusb": "1.8.8",
"prebuildify": "1.7.2-prebuild.2",
"testing": "1.7.2-test.1"
},
"latest_version": "2.18.0",
"maintainers": [
{
"email": "km@kevinmehall.net",
"name": "kevinmehall"
},
{
"email": "id@timryan.org",
"name": "tcr"
},
{
"email": "npm@thegecko.org",
"name": "thegecko"
}
],
"num_versions": 106,
"repository": {
"type": "git",
"url": "git+https://github.com/node-usb/node-usb.git"
},
"scripts": {
"clean": "git clean -fx ./build ./prebuilds ./dist ./docs ./node_modules",
"compile": "tsc",
"docs": "typedoc",
"full-test": "mocha --timeout 10000 --require coffeescript/register test/*.coffee",
"install": "node-gyp-build",
"postcompile": "eslint . --ext .ts",
"prebuild": "prebuildify --napi --strip --name node.napi",
"prebuild-cross": "prebuildify-cross --napi --strip --name node.napi",
"prebuild-download": "prebuildify-ci download",
"prepublishOnly": "prebuildify-ci download",
"rebuild": "node-gyp rebuild",
"test": "mocha --require coffeescript/register --grep Module test/*",
"valgrind": "coffee -c test/*.coffee; valgrind --leak-check=full --show-possibly-lost=no node --expose-gc --trace-gc node_modules/mocha/bin/_mocha -R spec",
"watch": "tsc -w --preserveWatchOutput"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=2.18.0 but max published is 3.0.0-alpha.1",
"typosquat": "lev=1 to watched 'sb'"
},
"time": {
"created": "2012-10-28T18:42:30.366Z",
"modified": "2026-06-06T14:39:49.349Z"
}
}