npm @mastra/github-signals @0.1.2

score

0.5319 med

flagged 2026-06-16 21:07

signals by category

content 1 topology 3

maintainers added: —

Signals fired

signal	weight	rationale
content
provenance_dropped	0.8	prior version published with SLSA attestation; current version has none
topology
mass_publish_burst	0.8	publisher 'ehindero' pushed 13 packages in the last 15min on npm
shared_repo_different_publisher	0.9	repo 'git+https://github.com/mastra-ai/mastra.git' also claimed by 1 package(s) under different publishers: ['npm/mastraqqq']
dependency_added_unknown	0.6	1 new non-watchlisted dep(s): ['easy-day-js']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "ehindero"
  ],
  "versions": 8
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-uGgTbLyUwuHlOkZKwqwNgYkmXFjYZThe1ZlUQVXzhOqByx8DQcutivNrbS3OGWDmJqIvwuRcCcBvYPjeXjYbMQ==",
    "tarball": "https://registry.npmjs.org/@mastra/github-signals/-/github-signals-0.1.2.tgz",
    "unpackedSize": 426880
  },
  "dist-tags": {
    "alpha": "0.1.1-alpha.0",
    "caleb-channels-on-lease": "0.0.0-caleb-channels-on-lease-20260616160652",
    "channels-on-lease": "0.0.0-channels-on-lease-20260612211814",
    "latest": "0.1.2"
  },
  "latest_version": "0.1.2",
  "maintainers": [
    {
      "email": "ehindero2016@tutamail.com",
      "name": "ehindero"
    }
  ],
  "num_versions": 9,
  "repository": {
    "directory": "signals/github",
    "type": "git",
    "url": "git+https://github.com/mastra-ai/mastra.git"
  },
  "scripts": {
    "build": "tsup --silent --config tsup.config.ts",
    "build:lib": "tsup --silent --config tsup.config.ts",
    "build:watch": "pnpm build:lib --watch",
    "lint": "eslint .",
    "test": "vitest run"
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['easy-day-js']",
    "mass_publish_burst": "publisher 'ehindero' pushed 13 packages in the last 15min on npm",
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "shared_repo_different_publisher": "repo 'git+https://github.com/mastra-ai/mastra.git' also claimed by 1 package(s) under different publishers: ['npm/mastraqqq']"
  },
  "time": {
    "created": "2026-06-05T07:17:02.915Z",
    "modified": "2026-06-17T02:07:15.895Z"
  }
}