Finding / eve
2026-09-21-eve-channel-facts-npm-published-three-versions-with-no-git-tag-latest-is-0-64
Channel facts: npm published three versions with no git tag; latest is 0.64.1. For three published versions there is no tag to audit against. The minor 0.52.0 has no release notes; 0.52.2’s notes cover the gap (ahead_by=56 vs 0.51.0).
Channel: npm (no tag). Half: defect (provenance). Date: 2026-09-04.
Operator consequence: Do not pin 0.51.1, 0.52.0, or 0.52.1; there is no
tagged source to review. Do not install eve@beta.
Receipt
Finding metadata
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Finding ID: 2026-09-21-eve-channel-facts-npm-published-three-versions-with-no-git-tag-latest-is-0-64
Profile citations
- Eve / claim / npm-versions-without-tags
Source links
Primary links, including exact changelog lines when available.