npm @forge/cli @12.21.0
score
0.6
med
flagged
2026-06-08 23:26
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| dist_tag_anomaly | 0.5 | dist-tags.latest=12.21.0 but max published is 12.22.0-next.8-experimental-04898b4 |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"atlassianartifactteam"
],
"versions": 744
}
Evidence (package doc at flag time)
{
"dependencies_count": 41,
"dist": {
"integrity": "sha512-UqMfBhVKCEqpageJLDkSX/wiaUaRYe8tIN3Y3AaSdHWX9g5odlw/tWJAyM3D18EImuKygxiqcy4haIRaOBqdYw==",
"tarball": "https://registry.npmjs.org/@forge/cli/-/cli-12.21.0.tgz",
"unpackedSize": 2174096
},
"dist-tags": {
"094bb6d9783c80ccccd446a1d4e0603718ec585f": "0.0.0-experimental-24f6ac8677d52a91e787a5e03726b5e96ce5e12c",
"1539a86": "0.0.0-experimental-56e9ae8",
"1a64864": "0.0.0-experimental-5db9029",
"56e9ae8": "0.0.0-experimental-b690b68",
"b690b68": "0.0.0-experimental-f83134d",
"experimental": "12.22.0-next.8-experimental-04898b4",
"f83134d": "0.0.0-experimental-1a64864",
"latest": "12.21.0",
"next": "12.22.0-next.9",
"test": "4.2.0-test.8"
},
"latest_version": "12.21.0",
"maintainers": [
{
"email": "eng-development-tooling-artifacts@atlassian.com",
"name": "atlassianartifactteam"
}
],
"num_versions": 745,
"repository": null,
"scripts": {
"build": "yarn run compile",
"clean": "rm -rf ./out && rm -f tsconfig.tsbuildinfo",
"compile": "tsc -b -v",
"dev": "NODE_ENV=development ts-node src/bin/cli.ts",
"generate:custom-scopes-schema": "yaml -1js --indent 2 < src/custom-scopes/validation/schema.yaml > src/custom-scopes/validation/schema.json",
"generate:custom-scopes-types": "json2ts --input src/custom-scopes/validation/schema.json --output src/custom-scopes/generated-types.d.ts --style.singleQuote",
"inspect": "node -r ts-node/register --inspect-brk src/bin/cli.ts",
"postbuild": "chmod +x out/bin/*.js && ts-node scripts/configureAutocomplete.ts",
"postinstall": "node -e \"fs.existsSync('./out/bin/postinstall.js') && require('./out/bin/postinstall.js')\"",
"prebuild": "yarn run clean && yarn run generate:custom-scopes-schema && yarn run generate:custom-scopes-types"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=12.21.0 but max published is 12.22.0-next.8-experimental-04898b4",
"install_script_payload": "install/lifecycle script matches payload regex",
"no_repo": "package.json has no repository field"
},
"time": {
"created": "2019-11-19T04:54:56.922Z",
"modified": "2026-06-09T04:25:57.369Z"
}
}