BEACON

← candidates

npm @forge/cli @12.21.0

score
0.65 med
flagged 2026-06-11 01:08
signals by category
content 1 topology 3

maintainers added:

package profile →

Signals fired

signalweightrationale
content
install_script_payload 1.0 install/lifecycle script matches payload regex
topology
no_repo 0.3 package.json has no repository field
dist_tag_anomaly 0.5 dist-tags.latest=12.21.0 but max published is 12.22.0-next.8-experimental-04898b4
mass_publish_burst 0.8 publisher 'atlassianartifactteam' pushed 6 packages in the last 15min on npm

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "atlassianartifactteam"
  ],
  "versions": 745
}

Evidence (package doc at flag time)

{
  "dependencies_count": 41,
  "dist": {
    "integrity": "sha512-UqMfBhVKCEqpageJLDkSX/wiaUaRYe8tIN3Y3AaSdHWX9g5odlw/tWJAyM3D18EImuKygxiqcy4haIRaOBqdYw==",
    "tarball": "https://registry.npmjs.org/@forge/cli/-/cli-12.21.0.tgz",
    "unpackedSize": 2174096
  },
  "dist-tags": {
    "094bb6d9783c80ccccd446a1d4e0603718ec585f": "0.0.0-experimental-24f6ac8677d52a91e787a5e03726b5e96ce5e12c",
    "1539a86": "0.0.0-experimental-56e9ae8",
    "1a64864": "0.0.0-experimental-5db9029",
    "56e9ae8": "0.0.0-experimental-b690b68",
    "b690b68": "0.0.0-experimental-f83134d",
    "experimental": "12.22.0-next.8-experimental-a344346",
    "f83134d": "0.0.0-experimental-1a64864",
    "latest": "12.21.0",
    "next": "12.22.0-next.9",
    "test": "4.2.0-test.8"
  },
  "latest_version": "12.21.0",
  "maintainers": [
    {
      "email": "eng-development-tooling-artifacts@atlassian.com",
      "name": "atlassianartifactteam"
    }
  ],
  "num_versions": 746,
  "repository": null,
  "scripts": {
    "build": "yarn run compile",
    "clean": "rm -rf ./out && rm -f tsconfig.tsbuildinfo",
    "compile": "tsc -b -v",
    "dev": "NODE_ENV=development ts-node src/bin/cli.ts",
    "generate:custom-scopes-schema": "yaml -1js --indent 2 < src/custom-scopes/validation/schema.yaml > src/custom-scopes/validation/schema.json",
    "generate:custom-scopes-types": "json2ts --input src/custom-scopes/validation/schema.json --output src/custom-scopes/generated-types.d.ts --style.singleQuote",
    "inspect": "node -r ts-node/register --inspect-brk src/bin/cli.ts",
    "postbuild": "chmod +x out/bin/*.js && ts-node scripts/configureAutocomplete.ts",
    "postinstall": "node -e \"fs.existsSync('./out/bin/postinstall.js') && require('./out/bin/postinstall.js')\"",
    "prebuild": "yarn run clean && yarn run generate:custom-scopes-schema && yarn run generate:custom-scopes-types"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=12.21.0 but max published is 12.22.0-next.8-experimental-04898b4",
    "install_script_payload": "install/lifecycle script matches payload regex",
    "mass_publish_burst": "publisher 'atlassianartifactteam' pushed 6 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field"
  },
  "time": {
    "created": "2019-11-19T04:54:56.922Z",
    "modified": "2026-06-09T06:21:40.718Z"
  }
}