npm @glodon-aiot/bot-client-ui @3.17.0
score
0.5333
med
flagged
2026-06-16 00:29
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| dist_tag_anomaly | 0.5 | dist-tags.latest=3.17.0 but max published is 3.19.0-alpha.17 |
| mass_publish_burst | 0.8 | publisher 'feigy' pushed 5 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"feigy",
"gaiot-arn",
"youyi.sun"
],
"versions": 312
}
Evidence (package doc at flag time)
{
"dependencies_count": 1,
"dist": {
"integrity": "sha512-v/ATC7d2vNmlXSh3whGc/1myG6ovIKrick9zXNH+h7CS3JyHDDN1agREJuQpqum+CK6IiRRlPrWMLDZIPVk9eQ==",
"tarball": "https://registry.npmjs.org/@glodon-aiot/bot-client-ui/-/bot-client-ui-3.17.0.tgz",
"unpackedSize": 4194439
},
"dist-tags": {
"alpha": "3.19.0-alpha.30",
"beta": "3.19.0-beta.31",
"latest": "3.17.0",
"shapshot": "3.11.1-shapshot.1765331459",
"snapshot": "3.10.0-snapshot.26"
},
"latest_version": "3.17.0",
"maintainers": [
{
"email": "feiguoyou@hotmail.com",
"name": "feigy"
},
{
"email": "1017124510@qq.com",
"name": "gaiot-arn"
},
{
"email": "jzjfsz@126.com",
"name": "youyi.sun"
}
],
"num_versions": 314,
"repository": null,
"scripts": {
"build": "tsc && vite build --mode prod && yarn build:cdn",
"build-storybook": "build-storybook",
"build:cdn": "tsc && vite build --mode prod --config ./vite.config.cdn.ts",
"check": "yarn prettier --check .",
"cy-open": "yarn run cypress open",
"dev": "vite",
"docs": "start-storybook -p 6006",
"lint": "eslint --ext .tsx,.ts --fix ./example -c .eslintrc.js",
"preview": "vite preview",
"start": "vite",
"storybook": "start-storybook -p 6006",
"upload:cdn": "node scripts/upload-cdn.cjs",
"watch": "tsc && vite build --mode prod --watch",
"write": "yarn prettier --write ."
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=3.17.0 but max published is 3.19.0-alpha.17",
"mass_publish_burst": "publisher 'feigy' pushed 5 packages in the last 15min on npm",
"no_repo": "package.json has no repository field"
},
"time": {
"created": "2025-04-17T06:08:07.878Z",
"modified": "2026-06-16T05:29:13.659Z"
}
}