BEACON

← candidates

npm marko @5.39.4

score
0.7333 high
flagged 2026-06-12 18:26
signals by category
cadence 1 topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 5 versions in last 24h: ['6.1.3', '5.39.3', '6.1.4', '5.39.4', '6.1.5']
topology
dist_tag_anomaly 0.5 dist-tags.latest=5.39.4 but max published is 6.1.5
shared_repo_different_publisher 0.9 repo 'git+https://github.com/marko-js/marko.git' also claimed by 2 package(s) under different publishers: ['npm/@marko/runtime-tags', 'npm/@marko/compiler']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "ryansolid",
    "mlrawlings",
    "agliga",
    "ryanturnquist",
    "tigt",
    "dylanpiercey",
    "lulavalva"
  ],
  "versions": 1307
}

Evidence (package doc at flag time)

{
  "dependencies_count": 15,
  "dist": {
    "integrity": "sha512-IBzG1nfxNbLUJRb0RdCa/RPgSDgXzR74Pxovn7RXBj1pU65aYzmJdx4af+HFCGj/PtbwyD62Vf6vR/PTvBAjQg==",
    "tarball": "https://registry.npmjs.org/marko/-/marko-5.39.4.tgz",
    "unpackedSize": 1489714
  },
  "dist-tags": {
    "latest": "5.39.4",
    "m2": "2.11.3",
    "m3": "3.14.4",
    "m4": "4.28.10",
    "next": "6.1.5"
  },
  "latest_version": "5.39.4",
  "maintainers": [
    {
      "email": "ryansolid@gmail.com",
      "name": "ryansolid"
    },
    {
      "email": "ml.rawlings@gmail.com",
      "name": "mlrawlings"
    },
    {
      "email": "agliga4@gmail.com",
      "name": "agliga"
    },
    {
      "email": "rturnq@gmail.com",
      "name": "ryanturnquist"
    },
    {
      "email": "npm@ti.gt",
      "name": "tigt"
    },
    {
      "email": "pierceydylan@gmail.com",
      "name": "dylanpiercey"
    },
    {
      "email": "lukelavalva@gmail.com",
      "name": "lulavalva"
    }
  ],
  "num_versions": 1307,
  "repository": {
    "directory": "packages/runtime-class",
    "type": "git",
    "url": "git+https://github.com/marko-js/marko.git"
  },
  "scripts": {
    "build": "babel ./src --out-dir ./dist --extensions .js --copy-files --config-file ../../babel.config.js --env-name=production"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=5.39.4 but max published is 6.1.5",
    "rapid_release": "5 versions in last 24h: ['6.1.3', '5.39.3', '6.1.4', '5.39.4', '6.1.5']",
    "shared_repo_different_publisher": "repo 'git+https://github.com/marko-js/marko.git' also claimed by 2 package(s) under different publishers: ['npm/@marko/runtime-tags', 'npm/@marko/compiler']"
  },
  "time": {
    "created": "2014-09-17T15:37:36.890Z",
    "modified": "2026-06-12T22:18:26.253Z"
  }
}