BEACON

← candidates

npm @cloudbase/js-sdk @3.4.0

score
0.58 med
flagged 2026-06-09 03:50
signals by category
content 1 topology 2 enrichment 2

maintainers added:

package profile →

Signals fired

signalweightrationale
content
size_spike 0.5 unpackedSize 2297929 -> 8958233 (3.9×)
topology
dist_tag_anomaly 0.5 dist-tags.latest=3.4.0 but max published is 4.0.0
dependency_added_unknown 0.6 9 new non-watchlisted dep(s): ['@cloudbase/adapter-wx_mp', '@cloudbase/container', '@cloudbase/oauth', '@cloudbase/wx-cloud-client-sdk', '@mattiasbuelens/web-streams-adapter'] ...
enrichment
repo_archived 0.7 claimed repo TencentCloudBase/cloudbase-js-sdk is archived but package keeps publishing
commit_cadence_mismatch 0.6 repo last pushed 1565d ago but package version was published 0d ago

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "starkwang",
    "yhyang",
    "binggg",
    "fengkx",
    "liuyanjie",
    "justan",
    "woodenstone",
    "miusuncle",
    "yuzhen",
    "wedabot",
    "joeyren",
    "areo-joe",
    "coylexie",
    "lukejyhuang"
  ],
  "versions": 382
}

Evidence (package doc at flag time)

{
  "dependencies_count": 23,
  "dist": {
    "integrity": "sha512-svG7/Dlkg9reUbkX4xI6uJCTZnvc82RnRw2ub8NspuM1cybhZwuEMxB+mGmDWtTBBaiFJb84qdrt33ZKF8UUMg==",
    "tarball": "https://registry.npmjs.org/@cloudbase/js-sdk/-/js-sdk-3.4.0.tgz",
    "unpackedSize": 8958233
  },
  "dist-tags": {
    "alpha": "3.3.14-alpha.2",
    "beta": "3.3.14-beta.7",
    "latest": "3.4.0",
    "next": "3.3.9",
    "next_2025": "2.9.6",
    "v1": "1.7.4",
    "v1beta": "1.8.4",
    "v2": "2.28.8"
  },
  "latest_version": "3.4.0",
  "maintainers": [
    {
      "email": "381152119@qq.com",
      "name": "starkwang"
    },
    {
      "email": "yhsunshining@gmail.com",
      "name": "yhyang"
    },
    {
      "email": "being99@qq.com",
      "name": "binggg"
    },
    {
      "email": "liangkx8237@gmail.com",
      "name": "fengkx"
    },
    {
      "email": "469835132@qq.com",
      "name": "liuyanjie"
    },
    {
      "email": "ckr189@gmail.com",
      "name": "justan"
    },
    {
      "email": "link1024@outlook.com",
      "name": "woodenstone"
    },
    {
      "email": "miusuncle@gmail.com",
      "name": "miusuncle"
    },
    {
      "email": "112287812@qq.com",
      "name": "yuzhen"
    },
    {
      "email": "wedadevops@tencent.com",
      "name": "wedabot"
    },
    {
      "email": "1412687451@qq.com",
      "name": "joeyren"
    },
    {
      "email": "zengjoe@foxmail.com",
      "name": "areo-joe"
    },
    {
      "email": "coylexie@tencent.com",
      "name": "coylexie"
    },
    {
      "email": "lukejyhuang@tencent.com",
      "name": "lukejyhuang"
    }
  ],
  "num_versions": 383,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/TencentCloudBase/cloudbase-js-sdk.git"
  },
  "scripts": {
    "build": "rm -rf dist/ && gulp build",
    "build:cdn": "gulp cdn",
    "build:e2e": "rm -rf dist/ && NODE_ENV=e2e gulp e2e",
    "lint": "eslint --fix \"./src/**/*.ts\"",
    "precommit": "npm run lint"
  },
  "signal_details": {
    "commit_cadence_mismatch": "repo last pushed 1565d ago but package version was published 0d ago",
    "dependency_added_unknown": "9 new non-watchlisted dep(s): ['@cloudbase/adapter-wx_mp', '@cloudbase/container', '@cloudbase/oauth', '@cloudbase/wx-cloud-client-sdk', '@mattiasbuelens/web-streams-adapter'] ...",
    "dist_tag_anomaly": "dist-tags.latest=3.4.0 but max published is 4.0.0",
    "repo_archived": "claimed repo TencentCloudBase/cloudbase-js-sdk is archived but package keeps publishing",
    "size_spike": "unpackedSize 2297929 -> 8958233 (3.9\u00d7)"
  },
  "time": {
    "created": "2020-06-18T03:21:01.191Z",
    "modified": "2026-06-09T08:50:21.263Z"
  }
}