BEACON

← candidates

npm @tonic-ui/react @2.13.0

score
0.65 med
flagged 2026-06-12 11:21
signals by category
content 1 topology 1

maintainers added:

package profile →

Signals fired

signalweightrationale
content
provenance_dropped 0.8 prior version published with SLSA attestation; current version has none
topology
dist_tag_anomaly 0.5 dist-tags.latest=2.13.0 but max published is 2.14.0

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "smalltase",
    "cheton",
    "trendmicro-frontend"
  ],
  "versions": 106
}

Evidence (package doc at flag time)

{
  "dependencies_count": 15,
  "dist": {
    "integrity": "sha512-oFJ9yb+XIDkTWj0aVxM++Mnthq7sdde2ZJyTKU3bhNQfEx2EHPiRCYS5NuO88263zfZ2v8PdYywQT88W/k6g5w==",
    "tarball": "https://registry.npmjs.org/@tonic-ui/react/-/react-2.13.0.tgz",
    "unpackedSize": 1835169
  },
  "dist-tags": {
    "latest": "2.13.0"
  },
  "latest_version": "2.13.0",
  "maintainers": [
    {
      "email": "smalltase@gmail.com",
      "name": "smalltase"
    },
    {
      "email": "cheton@gmail.com",
      "name": "cheton"
    },
    {
      "email": "trendmicro.frontend@gmail.com",
      "name": "trendmicro-frontend"
    }
  ],
  "num_versions": 107,
  "repository": {
    "directory": "packages/react",
    "type": "git",
    "url": "git+https://github.com/trendmicro-frontend/tonic-ui.git"
  },
  "scripts": {
    "build": "cross-env rollup --config rollup.config.mjs",
    "clean": "del build coverage dist",
    "lint": "eslint --ext .js,.jsx,.mjs .",
    "pre-push": "bash -c 'echo -e \"=> \\e[1;33m$npm_package_name\\e[0m\"' && yarn run build && yarn run lint && yarn run test",
    "prepublishOnly": "yarn run build",
    "test": "jest --maxWorkers=2"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=2.13.0 but max published is 2.14.0",
    "provenance_dropped": "prior version published with SLSA attestation; current version has none"
  },
  "time": {
    "created": "2022-01-15T02:40:31.527Z",
    "modified": "2026-06-12T16:21:24.272Z"
  }
}