npm bare-script @4.2.3

score

0.5 med

flagged 2026-06-09 10:59

signals by category

topology 2

maintainers added: —

Signals fired

signal	weight	rationale
topology
no_repo	0.3	package.json has no repository field
typosquat	1.0	combosquat of 'bare'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "craigahobbs"
  ],
  "versions": 104
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-GH6P0wDrY2o+py8inz28oKJB2s12bDnnja7GffptH1xGEfgYgwFtOyJIi20GWxvhJx7m6ZUccrl+gwu6uDWlBA==",
    "tarball": "https://registry.npmjs.org/bare-script/-/bare-script-4.2.3.tgz",
    "unpackedSize": 583474
  },
  "dist-tags": {
    "latest": "4.2.3"
  },
  "latest_version": "4.2.3",
  "maintainers": [
    {
      "email": "craigahobbs@gmail.com",
      "name": "craigahobbs"
    }
  ],
  "num_versions": 105,
  "repository": null,
  "scripts": {
    "test": "node --test test/"
  },
  "signal_details": {
    "no_repo": "package.json has no repository field",
    "typosquat": "combosquat of 'bare'"
  },
  "time": {
    "created": "2023-08-07T17:12:56.590Z",
    "modified": "2026-06-09T15:59:15.665Z"
  }
}