BEACON

← candidates

npm @shopify/dev-mcp @1.13.3

score
0.75 high
flagged 2026-06-02 01:09
signals by category
content 2 topology 3

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

Signals fired

signalweightrationale
content
bin_added 0.8 new bin entry: ['shopify-dev-mcp']
script_count_spike 0.5 scripts count 0 -> 10
topology
no_repo 0.3 package.json has no repository field
mass_publish_burst 0.8 publisher 'GitHub Actions' pushed 1417 packages in the last 15min on npm
dependency_added_unknown 0.6 20 new non-watchlisted dep(s): ['@modelcontextprotocol/sdk', '@react-router/dev', '@shopify/app-bridge-types', '@shopify/cli', '@shopify/hydrogen'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "jaimie.way",
    "shopify-admin",
    "shopify-dep",
    "mishsmelle",
    "buitammy",
    "chris.craig"
  ],
  "versions": 119
}

Evidence (package doc at flag time)

{
  "dependencies_count": 20,
  "dist": {
    "integrity": "sha512-ZKFu2Akc8Zb3cTjxeipXCZbm/N5NNH/I5eim7KdHZH8ynMMEdq4KzvVTFwk3DWAr8G8cH1WIAZOlDeFur0NRaQ==",
    "tarball": "https://registry.npmjs.org/@shopify/dev-mcp/-/dev-mcp-1.13.3.tgz",
    "unpackedSize": 2667720
  },
  "dist-tags": {
    "latest": "1.13.3",
    "snapshot": "1.13.3-snapshot-20260601184547"
  },
  "latest_version": "1.13.3",
  "maintainers": [
    {
      "email": "jaimie.way@shopify.com",
      "name": "jaimie.way"
    },
    {
      "email": "npmjs@shopify.com",
      "name": "shopify-admin"
    },
    {
      "email": "npmjs+shopify-dep@shopify.com",
      "name": "shopify-dep"
    },
    {
      "email": "michelle.oconnor@shopify.com",
      "name": "mishsmelle"
    },
    {
      "email": "tammy.bui@shopify.com",
      "name": "buitammy"
    },
    {
      "email": "chris.craig@shopify.com",
      "name": "chris.craig"
    }
  ],
  "num_versions": 124,
  "repository": null,
  "scripts": {
    "build": "vite build && chmod +x dist/index.js",
    "build:internal": "INCLUDE_INTERNAL_APIS=true vite build && chmod +x dist/index.js",
    "build:watch": "vite watch",
    "get-sidenav-instructions": "pnpx tsx scripts/get-sidenav.ts",
    "inspector": "pnpx @modelcontextprotocol/inspector dist/index.js",
    "lint": "prettier --check --cache --ignore-unknown .",
    "lint:fix": "prettier --write --ignore-unknown .",
    "test": "vitest run",
    "test:watch": "vitest",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "_amplifiers": [
      "bin_added + no_repo: executable added with no upstream source for review (+0.15)"
    ],
    "bin_added": "new bin entry: ['shopify-dev-mcp']",
    "dependency_added_unknown": "20 new non-watchlisted dep(s): ['@modelcontextprotocol/sdk', '@react-router/dev', '@shopify/app-bridge-types', '@shopify/cli', '@shopify/hydrogen'] ...",
    "mass_publish_burst": "publisher 'GitHub Actions' pushed 1417 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field",
    "script_count_spike": "scripts count 0 -> 10"
  },
  "time": {
    "created": "2025-03-20T14:56:07.942Z",
    "modified": "2026-06-01T18:46:20.246Z"
  }
}