npm bulletin-deploy @0.9.0
score
0.7
high
flagged
2026-06-08 16:41
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.9.0 but max published is 0.10.0-rc.0 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/paritytech/bulletin-deploy.git' also claimed by 1 package(s) under different publishers: ['npm/@parity/product-deploy'] |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"enderofworlds007"
],
"versions": 171
}
Evidence (package doc at flag time)
{
"dependencies_count": 23,
"dist": {
"integrity": "sha512-iF8tsZTXmowxXVONWi9/GP1XOy0kHdbnS8HZKuABCJ2jbRojYO4lz93ETzF0I0o+CM0CEHvtzESjGMctkdv7tA==",
"tarball": "https://registry.npmjs.org/bulletin-deploy/-/bulletin-deploy-0.9.0.tgz",
"unpackedSize": 756233
},
"dist-tags": {
"latest": "0.9.0",
"next": "0.5.3-rc.1",
"rc": "0.10.0-rc.0"
},
"latest_version": "0.9.0",
"maintainers": [
{
"email": "ionut.zolti@gmail.com",
"name": "enderofworlds007"
}
],
"num_versions": 172,
"repository": {
"type": "git",
"url": "git+https://github.com/paritytech/bulletin-deploy.git"
},
"scripts": {
"benchmark": "npm run build && node benchmark.js",
"build": "tsup src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts --format esm --dts --clean --target node22",
"postinstall": "patch-package || true",
"prepare": "npm run build",
"refresh-environments": "node scripts/refresh-environments.mjs",
"test": "npm run build && node --test test/test.js test/cli-help.test.js test/helpers/e2e-helpers.test.js test/environments.test.js test/refresh-environments.test.js test/chunk-sharing-report.test.js test/product-manifest.test.js test/cache-savings-totals.test.js test/error-pattern-signature.test.js test/exit-codes.test.js test/probe-env-health.test.js test/e2e-chain-calls.test.js test/auth-config.test.js test/whoami.test.js test/login.test.js test/logout.test.js test/auth-resolve.test.js test/storage-signer.test.js test/spinner.test.js test/sss-allowance.test.js test/sss-allowance-cache.test.js && npm run test:vendor",
"test:e2e": "npm run build && node --test test/e2e.test.js",
"test:e2e:nightly": "bash scripts/e2e-pass.sh nightly",
"test:e2e:pr": "bash scripts/e2e-pass.sh pr",
"test:e2e:smoke": "bash scripts/e2e-pass.sh smoke",
"test:vendor": "vitest run src/auth/vendor"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.9.0 but max published is 0.10.0-rc.0",
"shared_repo_different_publisher": "repo 'git+https://github.com/paritytech/bulletin-deploy.git' also claimed by 1 package(s) under different publishers: ['npm/@parity/product-deploy']"
},
"time": {
"created": "2026-03-23T15:00:06.877Z",
"modified": "2026-06-07T23:32:23.742Z"
}
}