npm bare-script @4.2.7

score

0.5 med

flagged 2026-06-12 20:40

signals by category

topology 2

maintainers added: —

Signals fired

signal	weight	rationale
topology
no_repo	0.3	package.json has no repository field
typosquat	1.0	combosquat of 'bare'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "craigahobbs"
  ],
  "versions": 105
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-ISHJgCwmFs/Y0XdTsxnlFVDJBouWI2WBSasyzF8pmjQAEfAQgJDMKW8ROZgcPRtH6HoeVm8YfjeKvzUvbdPxlw==",
    "tarball": "https://registry.npmjs.org/bare-script/-/bare-script-4.2.7.tgz",
    "unpackedSize": 585088
  },
  "dist-tags": {
    "latest": "4.2.7"
  },
  "latest_version": "4.2.7",
  "maintainers": [
    {
      "email": "craigahobbs@gmail.com",
      "name": "craigahobbs"
    }
  ],
  "num_versions": 106,
  "repository": null,
  "scripts": {
    "test": "node --test test/"
  },
  "signal_details": {
    "no_repo": "package.json has no repository field",
    "typosquat": "combosquat of 'bare'"
  },
  "time": {
    "created": "2023-08-07T17:12:56.590Z",
    "modified": "2026-06-13T01:40:18.894Z"
  }
}