BEACON

← candidates

npm @pexip-engage-public/graphql @1.7.8

score
0.75 high
flagged 2026-06-08 08:47
signals by category
topology 2

maintainers added: —

package profile →

Signals fired

signalweightrationale
topology
shared_repo_different_publisher 0.9 repo 'https://github.com/skedify/frontend-mono.git' also claimed by 3 package(s) under different publishers: ['npm/@pexip-engage-public/utils', 'npm/@pexip-engage-public/color-utils', 'npm/@pexip-engage-public/plugin']
dependency_added_unknown 0.6 6 new non-watchlisted dep(s): ['@pexip-engage-public/utils', 'gql.tada', 'graphql', 'graphql-request', 'lz-string'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "skedibot"
  ],
  "versions": 285
}

Evidence (package doc at flag time)

{
  "dependencies_count": 6,
  "dist": {
    "integrity": "sha512-9GDH3BEMDNcot/SI86YJewCj/tMhTMC9HkHhmK4ibqZsh+xC8XIsv7Un9GAW8TnjcY8NQA7SJMK3t4ySsTM+OA==",
    "tarball": "https://registry.npmjs.org/@pexip-engage-public/graphql/-/graphql-1.7.8.tgz",
    "unpackedSize": 7148801
  },
  "dist-tags": {
    "canary": "1.7.3",
    "latest": "1.7.8"
  },
  "latest_version": "1.7.8",
  "maintainers": [
    {
      "email": "npm@skedify.co",
      "name": "skedibot"
    }
  ],
  "num_versions": 288,
  "repository": {
    "directory": "packages/graphql",
    "type": "git",
    "url": "https://github.com/skedify/frontend-mono.git"
  },
  "scripts": {
    "build": "tsgo",
    "clean": "rm -rf .turbo node_modules dist tsconfig.tsbuildinfo",
    "codegen": "pnpm codegen:remote",
    "codegen:diff": "graphql-inspector diff ./schema.graphql https://graph.development.pexipengage.com",
    "codegen:local": "gql-tada generate-output && graphql-codegen-esm",
    "codegen:remote": "graphql-inspector introspect https://graph.development.pexipengage.com --write ./schema.graphql && pnpm codegen:local"
  },
  "signal_details": {
    "dependency_added_unknown": "6 new non-watchlisted dep(s): ['@pexip-engage-public/utils', 'gql.tada', 'graphql', 'graphql-request', 'lz-string'] ...",
    "shared_repo_different_publisher": "repo 'https://github.com/skedify/frontend-mono.git' also claimed by 3 package(s) under different publishers: ['npm/@pexip-engage-public/utils', 'npm/@pexip-engage-public/color-utils', 'npm/@pexip-engage-public/plugin']"
  },
  "time": {
    "created": "2023-11-07T17:53:39.122Z",
    "modified": "2026-05-26T14:07:45.641Z"
  }
}