search

relay-tools / found-relay

Relay integration for Found
MIT License
276 stars 32 forks source link

v0.8.3, v0.9.0 and v0.9.1 are deployed to npm but not committed (npm account hacked?) #607

Closed gautierrollin closed 3 years ago

gautierrollin commented 3 years ago

Hi,

Looks like there is a synchronisation problem between npm versions and GitHub versions. Making me thinking that your npm account may have been compromised.

Those versions are published to npm:

However the last git tag is v0.8.2 released the 24 Jul 2020 (9 months ago)

That's very strange that npm versions keeps popping up but there is no more activity on the repository and @taion (the project owner) stops contributing to GitHub on Aug 25, 2020.

What's going on? Is it safe to install found-relay npm packages >0.8.2 ?

Where are the commits?

yvele commented 3 years ago

Hum.. last "non bot" commit is https://github.com/relay-tools/found-relay/commit/45cd7f66b4806d86e5eef2844b5ab9f4365e1e67 from @jquense (25 Jan) 🤔

I'm rolling back to v0.8.2 while waiting for clarification

jquense commented 3 years ago

no hacking, i just forgot to push the commits, should be there now