npm @holmdigital/engine @2.5.6
score
0.6068
med
flagged
2026-06-11 10:28
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| bin_added | 0.8 | new bin entry: ['hd-a11y-scan'] |
| script_count_spike | 0.5 | scripts count 0 -> 11 |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/holmdigital/a11y-hd.git' also claimed by 2 package(s) under different publishers: ['npm/@holmdigital/standards', 'npm/@holmdigital/components'] |
| dependency_added_unknown | 0.6 | 11 new non-watchlisted dep(s): ['@holmdigital/components', '@holmdigital/standards', 'axe-core', 'chalk', 'commander'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"holmdigital"
],
"versions": 35
}
Evidence (package doc at flag time)
{
"dependencies_count": 12,
"dist": {
"integrity": "sha512-txf+quXa0eaXIAuezVatWpC/QDL448yDot/OUWvHJ7osnQ9Uaa3zdG2cVEKEonAXGIaFFW5W14cIFXxHJRlAmg==",
"tarball": "https://registry.npmjs.org/@holmdigital/engine/-/engine-2.5.6.tgz",
"unpackedSize": 494502
},
"dist-tags": {
"latest": "2.5.6"
},
"latest_version": "2.5.6",
"maintainers": [
{
"email": "labontese@gmail.com",
"name": "holmdigital"
}
],
"num_versions": 36,
"repository": {
"directory": "packages/engine",
"type": "git",
"url": "git+https://github.com/holmdigital/a11y-hd.git"
},
"scripts": {
"build": "tsup && node scripts/copy-assets.mjs",
"check:exports": "publint --strict",
"check:types": "attw --pack . --ignore-rules no-resolution",
"dev": "tsup --watch",
"lint": "eslint src",
"prepublishOnly": "npm run verify",
"test": "vitest",
"test:ci": "vitest run",
"test:integration": "vitest run --config vitest.integration.config.ts",
"typecheck": "tsc --noEmit",
"verify": "npm run build && npm run lint && npm run typecheck && npm run check:exports && npm run check:types && npm run test:ci"
},
"signal_details": {
"bin_added": "new bin entry: ['hd-a11y-scan']",
"dependency_added_unknown": "11 new non-watchlisted dep(s): ['@holmdigital/components', '@holmdigital/standards', 'axe-core', 'chalk', 'commander'] ...",
"script_count_spike": "scripts count 0 -> 11",
"shared_repo_different_publisher": "repo 'git+https://github.com/holmdigital/a11y-hd.git' also claimed by 2 package(s) under different publishers: ['npm/@holmdigital/standards', 'npm/@holmdigital/components']"
},
"time": {
"created": "2025-12-13T16:47:13.371Z",
"modified": "2026-06-11T15:28:30.524Z"
}
}