Version 999.999.991 released with no code
Open
Nobody has claimed this yet.
bug
- Dominant language
- TypeScript
- Stars
- 7.2k
- Forks
- 748
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 1
Description
Hi,
We noticed that a release was made to npm with version 999.999.991, containing no actual code:
This is kind of concerning for such a popular package. Was the team aware of this release being made, and why was it made? It almost looks like somebody was testing for a supply chain attack.
Best regards,
Charlie
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by checking the npm page for react-native-ui-lib version 999.999.991 and comparing its published contents with the screenshots and repository release history. Determine whether the release was authorized, why it contains no code, and document the confirmed cause and any needed follow-up.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- react-native, typescript
- Domain
- release, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100