npm creditcard.js @3.0.61
score
0.9875
high
flagged
2026-06-08 10:26
amplifiers
co-occurring signal pairs that lift the final score
- deprecated_then_active + maintainer_churn: deprecated package revived under new identity (+0.15)
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| maintainer_churn | 1.0 | added: ['dedicio'] |
| content | ||
| new_install_script | 1.0 | first time ['postinstall', 'preinstall'] present |
| deprecated_then_active | 0.7 | previous latest was deprecated; new latest is not |
| provenance_dropped | 0.8 | prior version published with SLSA attestation; current version has none |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"cirocfc",
"contaazul-admin"
],
"versions": 71
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-XcQS3bs7NmwYezecATSPFQka/Z1QJ5ZZo/LnUNtbDgCbmUUfK/6HoTnjaycF1w7GLpM0Uv27YsEQ8qbBTbPFfw==",
"tarball": "https://registry.npmjs.org/creditcard.js/-/creditcard.js-3.0.61.tgz",
"unpackedSize": 6463
},
"dist-tags": {
"latest": "3.0.61"
},
"latest_version": "3.0.61",
"maintainers": [
{
"email": "blackops@contaazul.com",
"name": "contaazul-admin"
},
{
"email": "ciro.cfc@gmail.com",
"name": "cirocfc"
},
{
"email": "dedicio@gmail.com",
"name": "dedicio"
}
],
"num_versions": 72,
"repository": {
"type": "git",
"url": "git+https://github.com/ContaAzul/creditcard.js.git"
},
"scripts": {
"build": "yarn build:production",
"build:production": "rollup -c",
"build:watch": "rollup -c -w",
"cov": "jest --coverage",
"cov:publish": "yarn cov && cat ./.coverage/lcov.info | coveralls",
"cov:serve": "yarn cov && static-server .coverage/lcov-report --port 3000 --no-nocache",
"format": "prettier --write './src/**/*.js'",
"lint": "eslint src",
"lint:fix": "yarn lint --fix",
"postinstall": " yarn simple-git-hooks",
"postpublish": "ca-pinst --enable",
"preinstall": "yarn dlx only-allow yarn",
"prepublishOnly": "ca-pinst --disable",
"release": "release-it --config release-it.config.js",
"release:preview": "yarn release --ci --dry-run",
"test": "jest",
"test:watch": "yarn test -- --watch"
},
"signal_details": {
"_amplifiers": [
"deprecated_then_active + maintainer_churn: deprecated package revived under new identity (+0.15)"
],
"deprecated_then_active": "previous latest was deprecated; new latest is not",
"maintainer_churn": "added: ['dedicio']",
"new_install_script": "first time ['postinstall', 'preinstall'] present",
"provenance_dropped": "prior version published with SLSA attestation; current version has none"
},
"time": {
"created": "2016-01-26T17:19:59.173Z",
"modified": "2026-06-08T15:26:52.563Z"
}
}