npm @ai-sdk/codemod @3.0.6
score
0.623
med
flagged
2026-06-15 15:10
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| bin_added | 0.8 | new bin entry: ['codemod'] |
| script_count_spike | 0.5 | scripts count 0 -> 9 |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=3.0.6 but max published is 4.0.0-beta.0 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/vercel/ai.git' also claimed by 10 package(s) under different publishers: ['npm/@ai-sdk/xai', 'npm/@ai-sdk/anthropic-aws', 'npm/@ai-sdk/baseten'] ... |
| dependency_added_unknown | 0.6 | 4 new non-watchlisted dep(s): ['cli-progress', 'commander', 'debug', 'jscodeshift'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"vercel-release-bot",
"matheuss",
"matt.straka"
],
"versions": 64
}
Evidence (package doc at flag time)
{
"dependencies_count": 4,
"dist": {
"integrity": "sha512-/AejWLA5TDkabZQtYVJD20WmQ+plxWHd+ygqtcyzXEMdIATAb6AZ0RRPs5hh3mRpqGUrHj5/l8ydKVHNwx7R/w==",
"tarball": "https://registry.npmjs.org/@ai-sdk/codemod/-/codemod-3.0.6.tgz",
"unpackedSize": 1246130
},
"dist-tags": {
"ai-v5": "2.0.16",
"alpha": "2.0.0-alpha.0",
"beta": "4.0.0-beta.4",
"canary": "4.0.0-canary.6",
"latest": "3.0.6",
"snapshot": "0.0.0-bf6e4b15-20260402200305"
},
"latest_version": "3.0.6",
"maintainers": [
{
"email": "infra+release@vercel.com",
"name": "vercel-release-bot"
},
{
"email": "matheus.frndes@gmail.com",
"name": "matheuss"
},
{
"email": "matt.j.straka@gmail.com",
"name": "matt.straka"
}
],
"num_versions": 64,
"repository": {
"directory": "packages/codemod",
"type": "git",
"url": "git+https://github.com/vercel/ai.git"
},
"scripts": {
"build": "pnpm generate-readme && prettier --write \"README.md\" && pnpm clean && tsup --tsconfig tsconfig.build.json",
"clean": "del-cli dist *.tsbuildinfo",
"dev": "tsup --watch",
"generate-readme": "tsx scripts/generate-readme.ts",
"scaffold": "tsx scripts/scaffold-codemod.ts",
"test": "vitest --config vitest.config.ts --run",
"test:update": "UPDATE_SNAPSHOT=true vitest -u --run",
"test:watch": "vitest",
"type-check": "tsc --build"
},
"signal_details": {
"bin_added": "new bin entry: ['codemod']",
"dependency_added_unknown": "4 new non-watchlisted dep(s): ['cli-progress', 'commander', 'debug', 'jscodeshift']",
"dist_tag_anomaly": "dist-tags.latest=3.0.6 but max published is 4.0.0-beta.0",
"script_count_spike": "scripts count 0 -> 9",
"shared_repo_different_publisher": "repo 'git+https://github.com/vercel/ai.git' also claimed by 10 package(s) under different publishers: ['npm/@ai-sdk/xai', 'npm/@ai-sdk/anthropic-aws', 'npm/@ai-sdk/baseten'] ..."
},
"time": {
"created": "2024-11-11T18:33:03.328Z",
"modified": "2026-05-19T14:36:19.023Z"
}
}