BEACON

← candidates

npm yaml-flow @8.11.2

score
0.8157 high
flagged 2026-06-11 07:30
signals by category
cadence 1 topology 1 enrichment 1

maintainers added: —

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 4 versions in last 24h: ['8.9.2', '8.11.0', '8.11.1', '8.11.2']
topology
typosquat 1.0 lev=1 to watched 'yam-flow'
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 57d ago but package has 85 versions (expect >= 115d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "nsreehari"
  ],
  "versions": 84
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-ABSA2xmzfREJAV8btDbvmWXorMBxyUKcM12Ezl8InJujjQnA9GG4EBgpWiDDAjxksIRqyJrlPXL5Cid/u6eY3A==",
    "tarball": "https://registry.npmjs.org/yaml-flow/-/yaml-flow-8.11.2.tgz",
    "unpackedSize": 3821234
  },
  "dist-tags": {
    "latest": "8.11.2"
  },
  "latest_version": "8.11.2",
  "maintainers": [
    {
      "email": "nsreehari@gmail.com",
      "name": "nsreehari"
    }
  ],
  "num_versions": 85,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/nsreehari/yaml-flow.git"
  },
  "scripts": {
    "build": "npm run -s build:lib",
    "build:browser": "tsup --config tsup.browser.config.ts && node scripts/generate-browser-integrity.mjs",
    "build:cli": "tsup --config tsup.cli.config.ts",
    "build:cli-bundled": "node scripts/build-cli-bundled.mjs",
    "build:lib": "tsup --config tsup.config.ts",
    "check:browser-bundle": "node scripts/check-browser-bundle-safety.mjs",
    "check:bundle-budget": "node scripts/check-bundle-budgets.mjs",
    "check:minified": "node scripts/check-minified.mjs",
    "dev": "tsup --watch",
    "lint": "eslint src/",
    "prepublishOnly": "npm run build && npm run build:cli && npm run build:browser && npm run check:bundle-budget && npm run check:browser-bundle && npm run check:minified",
    "pycli:install": "python -m pip install -r py-standalone/requirements.txt",
    "pycli:install:py312": "py -3.12 -m pip install -r py-standalone/requirements.txt",
    "pycli:install:venv": "c:/Users/sreenaga/ADO/ai-tool-evolver/.venv/Scripts/python.exe -m pip install -r py-standalone/requirements.txt",
    "pycli:install:venv312": "./.venv312/Scripts/python.exe -m pip install -r py-standalone/requirements.txt",
    "release:gate": "npm run -s build && npm run -s build:cli && npm run -s build:browser && npm run -s test:run && npm run -s test:e2e && npm run -s check:bundle-budget && npm run -s check:browser-bundle && npm run -s check:minified",
    "standalone": "echo standalone is canonical; no assembly step required",
    "test": "vitest",
    "test:e2e": "vitest run --config vitest.e2e.config.ts",
    "test:python": "vitest run --config vitest.python.config.ts",
    "test:run": "vitest run",
    "tests:e2e": "npm run -s test:e2e",
    "tests:python": "npm run -s test:python",
    "typecheck": "tsc --noEmit",
    "validate:cards": "tsx scripts/validate-live-cards.ts"
  },
  "signal_details": {
    "rapid_release": "4 versions in last 24h: ['8.9.2', '8.11.0', '8.11.1', '8.11.2']",
    "repo_too_new_for_version_history": "claimed repo created 57d ago but package has 85 versions (expect >= 115d for that history)",
    "typosquat": "lev=1 to watched 'yam-flow'"
  },
  "time": {
    "created": "2026-04-15T08:57:51.802Z",
    "modified": "2026-06-11T12:30:12.261Z"
  }
}