BEACON

← candidates

npm @schoolai/shipyard @3.16.1

score
0.65 med
flagged 2026-06-16 22:09
signals by category
content 1 cadence 1 topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
content
install_script_payload 1.0 install/lifecycle script matches payload regex
cadence
rapid_release 0.8 4 versions in last 24h: ['3.14.0', '3.15.0', '3.16.0', '3.16.1']
topology
no_repo 0.3 package.json has no repository field
dist_tag_anomaly 0.5 dist-tags.latest=3.16.1 but max published is 3.17.0-rc.20260617.0

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "canadaduane",
    "cahlan_schoolai",
    "jacobpetterle",
    "sai-ops"
  ],
  "versions": 404
}

Evidence (package doc at flag time)

{
  "dependencies_count": 23,
  "dist": {
    "integrity": "sha512-jlf4D2WXicoEesGXEmEVXVSg/3IdfucgVht+nKuIav6bqGkDsrm4KacqmbvSITZgAveYXgsuvkXWBvWTf7ORlw==",
    "tarball": "https://registry.npmjs.org/@schoolai/shipyard/-/shipyard-3.16.1.tgz",
    "unpackedSize": 43171788
  },
  "dist-tags": {
    "latest": "3.16.1",
    "next": "3.17.0-rc.20260617.0",
    "nightly": "3.14.0-nightly.20260616.0"
  },
  "latest_version": "3.16.1",
  "maintainers": [
    {
      "email": "duane.johnson@gmail.com",
      "name": "canadaduane"
    },
    {
      "email": "cahlan@schoolai.com",
      "name": "cahlan_schoolai"
    },
    {
      "email": "jacobpetterle@gmail.com",
      "name": "jacobpetterle"
    },
    {
      "email": "ops@schoolai.com",
      "name": "sai-ops"
    }
  ],
  "num_versions": 404,
  "repository": null,
  "scripts": {
    "postinstall": "node -e \"const fs=require('fs'),path=require('path');const d=path.join(__dirname,'node_modules','node-pty','prebuilds');if(fs.existsSync(d))for(const a of fs.readdirSync(d)){const h=path.join(d,a,'spawn-helper');try{fs.chmodSync(h,0o755)}catch{}}\""
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=3.16.1 but max published is 3.17.0-rc.20260617.0",
    "install_script_payload": "install/lifecycle script matches payload regex",
    "no_repo": "package.json has no repository field",
    "rapid_release": "4 versions in last 24h: ['3.14.0', '3.15.0', '3.16.0', '3.16.1']"
  },
  "time": {
    "created": "2026-02-15T23:52:08.911Z",
    "modified": "2026-06-17T02:27:34.580Z"
  }
}