npm @stackory/monosync @1.2.2
score
0.6038
med
flagged
2026-06-13 22:26
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| provenance_dropped | 0.8 | prior version published with SLSA attestation; current version has none |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/stackory-lab/stackory' also claimed by 1 package(s) under different publishers: ['npm/@stackory/workers-tooling'] |
| enrichment | ||
| repo_doesnt_exist | 1.0 | claimed repo stackory-lab/stackory returns 404 on github.com |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"j-xzy"
],
"versions": 7
}
Evidence (package doc at flag time)
{
"dependencies_count": 2,
"dist": {
"integrity": "sha512-U4t+OklYU5UZIpywWhs5sYVmVXaWOeyaJg/vj4CPAGRxtT7lozobdnAZgmMRCsAd6PeOvID5hdb4+CqEcf+Ozw==",
"tarball": "https://registry.npmjs.org/@stackory/monosync/-/monosync-1.2.2.tgz",
"unpackedSize": 61828
},
"dist-tags": {
"latest": "1.2.2"
},
"latest_version": "1.2.2",
"maintainers": [
{
"email": "wu38607@gmail.com",
"name": "j-xzy"
}
],
"num_versions": 8,
"repository": {
"directory": "packages/monosync",
"type": "git",
"url": "https://github.com/stackory-lab/stackory"
},
"scripts": {
"build": "tsc -p tsconfig.build.json",
"check:dep": "depcruise --config .dependency-cruiser.mjs src",
"check:lint": "biome check --write",
"check:test": "vitest --watch=false",
"check:type": "tsc -p ./tsconfig.json --noEmit",
"clean": "rimraf ./node_modules dist",
"dev": "tsx src/bin.ts"
},
"signal_details": {
"provenance_dropped": "prior version published with SLSA attestation; current version has none",
"repo_doesnt_exist": "claimed repo stackory-lab/stackory returns 404 on github.com",
"shared_repo_different_publisher": "repo 'https://github.com/stackory-lab/stackory' also claimed by 1 package(s) under different publishers: ['npm/@stackory/workers-tooling']"
},
"time": {
"created": "2026-05-15T03:57:27.414Z",
"modified": "2026-06-12T07:08:44.029Z"
}
}