styled-reset @5.0.0
Maintainers
Keywords
Dev Dependencies (8)
| Package | Constraint | Registry Status |
|---|---|---|
| react | 18.2.0 | auto_approved |
| sortpack | 2.3.4 | Not imported |
| tap-spec | 5.0.0 | Not imported |
| typescript | 5.1.6 | auto_approved |
| npm-run-all | 4.1.5 | auto_approved |
| ts-standard | 12.0.2 | Not imported |
| @types/react | 18.2.14 | auto_approved |
| styled-components | 6.0.1 | auto_approved |
Changes from v4.5.2
No metadata changes detected.
File Changes
Risk Dispositions (1 applicable to this version, 0 other)
Accepted rules are downgraded to INFO on future analyses; rejected rules escalate to CRITICAL.
| Rule | Source | Disposition | Author | Reason | |
|---|---|---|---|---|---|
maintainer-takeover |
maintainer-change | reject | AI | AI (maintainer-change): Complete replacement of all prior maintainers by a zero-history account after 6+ years of dormancy is a strong takeover signal. |
SAST Findings (3)
All previous maintainers (zacanger) were replaced by new maintainers (zautumnz). This is a strong signal of a potential package hijack and requires careful review.
This version was published by a different npm account than previous versions on 2025-08-30. This could indicate a legitimate maintainer transition or an account compromise.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
Review Summary
Risk score: 83. Findings: 2 high (+50), 3 medium (+30), 1 low (+3).
Commit: 3b72749c97ae Browse source
Published to npm: