npm @helia/car @5.4.2

score

0.7 high

flagged 2026-06-01 23:27

signals by category

content 1 topology 3

maintainers added: —

Signals fired

signal	weight	rationale
content
script_count_spike	0.5	scripts count 0 -> 12
topology
mass_publish_burst	0.8	publisher 'GitHub Actions' pushed 974 packages in the last 15min on npm
shared_repo_different_publisher	0.9	repo 'git+https://github.com/ipfs/helia.git' also claimed by 3 package(s) under different publishers: ['npm/@helia/dnslink', 'npm/@helia/interface', 'npm/@helia/unixfs']
dependency_added_unknown	0.6	16 new non-watchlisted dep(s): ['@helia/interface', '@helia/utils', '@ipld/car', '@ipld/dag-pb', '@libp2p/interface'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "npm-service-account-ipfs",
    "achingbrain"
  ],
  "versions": 342
}

Evidence (package doc at flag time)

{
  "dependencies_count": 16,
  "dist": {
    "integrity": "sha512-XgyKANiZkKqblZAzYdZiK+NgADrhljWL1gM6rtaikgvBIiGwQF1fwi+WpZaijVnzYBfjrKtpu41YGB66umCqLA==",
    "tarball": "https://registry.npmjs.org/@helia/car/-/car-5.4.2.tgz",
    "unpackedSize": 1068485
  },
  "dist-tags": {
    "latest": "5.4.2",
    "next": "5.4.2-73a28eda"
  },
  "latest_version": "5.4.2",
  "maintainers": [
    {
      "email": "npm-service-account+ipfs@ipfs.tech",
      "name": "npm-service-account-ipfs"
    },
    {
      "email": "alex@achingbrain.net",
      "name": "achingbrain"
    }
  ],
  "num_versions": 343,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/ipfs/helia.git"
  },
  "scripts": {
    "build": "aegir build",
    "clean": "aegir clean",
    "dep-check": "aegir dep-check",
    "doc-check": "aegir doc-check",
    "lint": "aegir lint",
    "test": "aegir test",
    "test:chrome": "aegir test -t browser --cov",
    "test:chrome-webworker": "aegir test -t webworker",
    "test:electron-main": "aegir test -t electron-main",
    "test:firefox": "aegir test -t browser -- --browser firefox",
    "test:firefox-webworker": "aegir test -t webworker -- --browser firefox",
    "test:node": "aegir test -t node --cov"
  },
  "signal_details": {
    "dependency_added_unknown": "16 new non-watchlisted dep(s): ['@helia/interface', '@helia/utils', '@ipld/car', '@ipld/dag-pb', '@libp2p/interface'] ...",
    "mass_publish_burst": "publisher 'GitHub Actions' pushed 974 packages in the last 15min on npm",
    "script_count_spike": "scripts count 0 -> 12",
    "shared_repo_different_publisher": "repo 'git+https://github.com/ipfs/helia.git' also claimed by 3 package(s) under different publishers: ['npm/@helia/dnslink', 'npm/@helia/interface', 'npm/@helia/unixfs']"
  },
  "time": {
    "created": "2023-06-07T10:21:29.453Z",
    "modified": "2026-05-29T07:09:52.446Z"
  }
}