BEACON

← candidates

npm user-agents @2.1.66

score
0.7 high
flagged 2026-05-21 01:39
signals by category
identity 1 topology 1

maintainers added: —

package profile →

Signals fired

signalweightrationale
identity
publisher_unrecognized 0.7 latest published by 'CircleCI', not in maintainer set
topology
typosquat 1.0 combosquat of 'agents'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "intoli"
  ],
  "versions": 2887
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-a5FJP53Q3VWCw11wsEYgIPnYyWp9vaQH/LGBDURN9dSKZgM9TO1TRBLRe/XbAnWWbVGELpSwie6F0vqv/BjZSg==",
    "tarball": "https://registry.npmjs.org/user-agents/-/user-agents-2.1.66.tgz",
    "unpackedSize": 5583443
  },
  "dist-tags": {
    "latest": "2.1.66"
  },
  "latest_version": "2.1.66",
  "maintainers": [
    {
      "email": "npm@intoli.com",
      "name": "intoli"
    }
  ],
  "num_versions": 2888,
  "repository": {
    "type": "git",
    "url": "git+ssh://git@github.com/intoli/user-agents.git"
  },
  "scripts": {
    "build": "tsup",
    "gunzip-data": "node --loader ts-node/esm src/gunzip-data.ts src/user-agents.json.gz",
    "lint": "eslint src/ test/ && prettier --check src/ test/",
    "postbuild": "yarn gunzip-data && cp src/user-agents.json dist/",
    "test": "NODE_OPTIONS='--import tsx' mocha --exit --extensions '.ts, .js'",
    "update-data": "node --loader ts-node/esm src/update-data.ts src/user-agents.json.gz"
  },
  "signal_details": {
    "publisher_unrecognized": "latest published by 'CircleCI', not in maintainer set",
    "typosquat": "combosquat of 'agents'"
  },
  "time": {
    "created": "2013-03-03T09:58:29.319Z",
    "modified": "2026-05-20T06:38:08.276Z"
  }
}