BEACON

← candidates

npm @salesforce/pwa-kit-mcp @0.4.0

score
0.7333 high
flagged 2026-06-02 00:26
signals by category
content 2 topology 4

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

Signals fired

signalweightrationale
content
bin_added 0.8 new bin entry: ['pwa-kit-mcp']
script_count_spike 0.5 scripts count 0 -> 11
topology
no_repo 0.3 package.json has no repository field
dist_tag_anomaly 0.5 dist-tags.latest=0.4.0 but max published is 3.12.0-nightly-20250724080225
mass_publish_burst 0.8 publisher 'mobify' pushed 6 packages in the last 15min on npm
dependency_added_unknown 0.6 10 new non-watchlisted dep(s): ['@axe-core/playwright', '@babel/runtime', '@modelcontextprotocol/sdk', '@salesforce/telemetry', 'axe-core'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "ire-npm-team-user",
    "jimjag",
    "salesforce-releases",
    "jasonschroeder-sfdc",
    "mobify",
    "lwc-admin",
    "salesforce-admin"
  ],
  "versions": 191
}

Evidence (package doc at flag time)

{
  "dependencies_count": 10,
  "dist": {
    "integrity": "sha512-yfhhRbabuwPVfKPl7Cjj/60K5FrNxICIG54M4ljI5Oxs3aiROz01BK0i8hogFK8uxsudt2KSGEr6FhZs56KwLQ==",
    "tarball": "https://registry.npmjs.org/@salesforce/pwa-kit-mcp/-/pwa-kit-mcp-0.4.0.tgz",
    "unpackedSize": 2822125
  },
  "dist-tags": {
    "latest": "0.4.0",
    "next": "0.5.0-preview.2",
    "nightly-next": "0.4.0-nightly-20260601094525"
  },
  "latest_version": "0.4.0",
  "maintainers": [
    {
      "email": "industriesEngineeringDevOps@salesforce.com",
      "name": "ire-npm-team-user"
    },
    {
      "email": "jimjag@gmail.com",
      "name": "jimjag"
    },
    {
      "email": "alm-cli@salesforce.com",
      "name": "salesforce-releases"
    },
    {
      "email": "jschroeder@salesforce.com",
      "name": "jasonschroeder-sfdc"
    },
    {
      "email": "dev@mobify.com",
      "name": "mobify"
    },
    {
      "email": "admin@lwcjs.org",
      "name": "lwc-admin"
    },
    {
      "email": "osscore@salesforce.com",
      "name": "salesforce-admin"
    }
  ],
  "num_versions": 197,
  "repository": null,
  "scripts": {
    "build": "cross-env NODE_ENV=production internal-lib-build build",
    "build:watch": "nodemon --watch 'src/**' --ext 'js,ts' --exec  'npm run build'",
    "format": "pwa-kit-dev format \"**/*.{js,jsx}\"",
    "lint": "npm run lint:js",
    "lint:fix": "npm run lint:js -- --fix",
    "lint:js": "pwa-kit-dev lint \"**/*.{js,ts}\"",
    "prepare": "npm run build",
    "start": "node dist/server/server.js",
    "test": "internal-lib-build test",
    "test:inspect": "node --inspect-brk jest --runInBand",
    "test:watch": "npm test -- --watch"
  },
  "signal_details": {
    "_amplifiers": [
      "bin_added + no_repo: executable added with no upstream source for review (+0.15)"
    ],
    "bin_added": "new bin entry: ['pwa-kit-mcp']",
    "dependency_added_unknown": "10 new non-watchlisted dep(s): ['@axe-core/playwright', '@babel/runtime', '@modelcontextprotocol/sdk', '@salesforce/telemetry', 'axe-core'] ...",
    "dist_tag_anomaly": "dist-tags.latest=0.4.0 but max published is 3.12.0-nightly-20250724080225",
    "mass_publish_burst": "publisher 'mobify' pushed 6 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field",
    "script_count_spike": "scripts count 0 -> 11"
  },
  "time": {
    "created": "2025-07-17T21:04:00.515Z",
    "modified": "2026-06-01T09:50:27.812Z"
  }
}