npm @team-monet/monet @1.0.0

score

0.558 med

flagged 2026-06-14 03:53

signals by category

content 3 topology 1 enrichment 1

maintainers added: —

Signals fired

signal	weight	rationale
content
deprecated_then_active	0.7	previous latest was deprecated; new latest is not
license_changed	0.4	'AGPL-3.0-only' -> 'LicenseRef-Monet-Proprietary'
provenance_dropped	0.8	prior version published with SLSA attestation; current version has none
topology
shared_repo_different_publisher	0.9	repo 'git+https://github.com/team-monet/monet.git' also claimed by 1 package(s) under different publishers: ['npm/@team-monet/local']
enrichment
repo_doesnt_exist	1.0	claimed repo team-monet/monet returns 404 on github.com

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "jh-rhee",
    "john-on-lee"
  ],
  "versions": 12
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-aSwL5c3jiRdzgzuYw+rXzPwHRlY7LRd6cVek4a4AXot49twxh8iSS22xvUHWabRoMH0z2fOO1M7zJTBxAifkuw==",
    "tarball": "https://registry.npmjs.org/@team-monet/monet/-/monet-1.0.0.tgz",
    "unpackedSize": 924438
  },
  "dist-tags": {
    "latest": "1.0.0"
  },
  "latest_version": "1.0.0",
  "maintainers": [
    {
      "email": "jeonghunrhee@gmail.com",
      "name": "jh-rhee"
    },
    {
      "email": "john@onlee.io",
      "name": "john-on-lee"
    }
  ],
  "num_versions": 13,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/team-monet/monet.git"
  },
  "scripts": {
    "build": "node build.mjs",
    "build:cli": "node build.mjs cli",
    "dev": "tsx watch src/index.ts",
    "dev:cli": "tsx watch src/cli.ts",
    "postpack": "node scripts/restore-dev-deps.mjs",
    "prepack": "node build.mjs && node scripts/strip-dev-deps.mjs",
    "start": "node dist/index.js",
    "test": "vitest run --passWithNoTests --dir src",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "deprecated_then_active": "previous latest was deprecated; new latest is not",
    "license_changed": "'AGPL-3.0-only' -> 'LicenseRef-Monet-Proprietary'",
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "repo_doesnt_exist": "claimed repo team-monet/monet returns 404 on github.com",
    "shared_repo_different_publisher": "repo 'git+https://github.com/team-monet/monet.git' also claimed by 1 package(s) under different publishers: ['npm/@team-monet/local']"
  },
  "time": {
    "created": "2026-06-07T00:56:43.513Z",
    "modified": "2026-06-14T08:53:28.630Z"
  }
}