npm @zcomponent/html @1.5.0

score

0.5064 med

flagged 2026-06-12 04:11

signals by category

identity 1 cadence 1 topology 2

maintainers added: cgauld, nyan-left, simon_zappar

package profile →

amplifiers co-occurring signal pairs that lift the final score

dormant_burst + publisher_unrecognized: classic ATO: dormant package taken over and republished (+0.20)

Signals fired

signal	weight	rationale
identity
publisher_unrecognized	0.7	latest published by 'GitLab CI/CD', not in maintainer set
cadence
dormant_burst	1.0	dormant 268d (prev 1.4.2), then 1.5.0 just published
topology
no_repo	0.3	package.json has no repository field
dist_tag_anomaly	0.5	dist-tags.latest=1.5.0 but max published is 2.0.0-alpha.1

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [],
  "versions": 0
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-AbeOl1LeniUVu7lv/DL9N+3HZQZ9tfi0M3C+uj1dOqfTvDxB1QQBkU1TlPl861ypc5TTJ9SvMDzftAEfBjTDmw==",
    "tarball": "https://registry.npmjs.org/@zcomponent/html/-/html-1.5.0.tgz",
    "unpackedSize": 22167
  },
  "dist-tags": {
    "alpha": "2.0.0-alpha.2",
    "beta": "1.5.0-beta.1",
    "latest": "1.5.0"
  },
  "latest_version": "1.5.0",
  "maintainers": [
    {
      "email": "connell@zappar.com",
      "name": "cgauld"
    },
    {
      "email": "deim.jak@gmail.com",
      "name": "nyan-left"
    },
    {
      "email": "simon@zappar.com",
      "name": "simon_zappar"
    }
  ],
  "num_versions": 30,
  "repository": null,
  "scripts": {
    "build": "rm -rf lib && tsc && tsc-alias",
    "ctix": "ctix build",
    "docs": "typedoc --out docs",
    "predocs": "npm run ctix",
    "watch": "tsc -w"
  },
  "signal_details": {
    "_amplifiers": [
      "dormant_burst + publisher_unrecognized: classic ATO: dormant package taken over and republished (+0.20)"
    ],
    "dist_tag_anomaly": "dist-tags.latest=1.5.0 but max published is 2.0.0-alpha.1",
    "dormant_burst": "dormant 268d (prev 1.4.2), then 1.5.0 just published",
    "no_repo": "package.json has no repository field",
    "publisher_unrecognized": "latest published by 'GitLab CI/CD', not in maintainer set"
  },
  "time": {
    "created": "2022-12-16T14:27:46.054Z",
    "modified": "2026-06-12T09:11:00.339Z"
  }
}