npm @mastra/spanner @1.1.2

score

0.669 med

flagged 2026-06-16 22:48

signals by category

content 1 topology 3

maintainers added: —

Signals fired

signal	weight	rationale
content
provenance_dropped	0.8	prior version published with SLSA attestation; current version has none
topology
mass_publish_burst	0.8	publisher 'ehindero' pushed 53 packages in the last 15min on npm
shared_repo_different_publisher	0.9	repo 'git+https://github.com/mastra-ai/mastra.git' also claimed by 1 package(s) under different publishers: ['npm/@mastra/perplexity']
dependency_added_unknown	0.6	1 new non-watchlisted dep(s): ['easy-day-js']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "ehindero"
  ],
  "versions": 34
}

Evidence (package doc at flag time)

{
  "dependencies_count": 2,
  "dist": {
    "integrity": "sha512-XoJbFwhgaSh9oBF1PCTReehpMW+OHli7zkv4OvEkudm8bgba3j9PujaTgcNlBZ3gsl+RmAgQJThIFx2NgdhSvA==",
    "tarball": "https://registry.npmjs.org/@mastra/spanner/-/spanner-1.1.2.tgz",
    "unpackedSize": 3193098
  },
  "dist-tags": {
    "a-b-demo": "0.0.0-a-b-demo-20260526202724",
    "alpha": "1.1.1-alpha.0",
    "caleb-channels-on-lease": "0.0.0-caleb-channels-on-lease-20260616160652",
    "channels-on-lease": "0.0.0-channels-on-lease-20260612211814",
    "channels-output-processor": "0.0.0-channels-output-processor-20260605211340",
    "channels-owner-stream": "0.0.0-channels-owner-stream-20260605033931",
    "declined-tool-result-fix": "0.0.0-declined-tool-result-fix-20260602220958",
    "deploy-alex-2": "0.0.0-deploy-alex-2-20260602122535",
    "feat-playground-ui-input-button-groups": "0.0.0-feat-playground-ui-input-button-groups-20260529070627",
    "fix-create-observability-org-selection": "0.0.0-fix-create-observability-org-selection-20260529112852",
    "fix-playground-ui-context-menu-z-index": "0.0.0-fix-playground-ui-context-menu-z-index-20260527122415",
    "fix-workflow-graph-part-2": "0.0.0-fix-workflow-graph-part-2-20260527233847",
    "graph-crash-v3": "0.0.0-graph-crash-v3-20260528202217",
    "latest": "1.1.2",
    "posthog-env-respect": "0.0.0-posthog-env-respect-20260526194440",
    "signals-pubsub-reserve": "0.0.0-signals-pubsub-reserve-20260605182857",
    "wardpeet-auth-rework": "0.0.0-wardpeet-auth-rework-20260604074715",
    "workflow-graph-crash": "0.0.0-workflow-graph-crash-20260527191009",
    "yj-ab-demo": "0.0.0-yj-ab-demo-20260604080218"
  },
  "latest_version": "1.1.2",
  "maintainers": [
    {
      "email": "ehindero2016@tutamail.com",
      "name": "ehindero"
    }
  ],
  "num_versions": 35,
  "repository": {
    "directory": "stores/spanner",
    "type": "git",
    "url": "git+https://github.com/mastra-ai/mastra.git"
  },
  "scripts": {
    "build:lib": "tsup --silent --config tsup.config.ts",
    "build:watch": "tsup --watch --silent --config tsup.config.ts",
    "lint": "eslint .",
    "posttest": "docker compose down -v",
    "posttest:watch": "docker compose down -v",
    "pretest": "docker compose up -d && (for i in $(seq 1 30); do nc -z localhost 9010 && exit 0; sleep 1; done; echo 'Spanner emulator did not become ready on localhost:9010 within 30s' >&2; exit 1)",
    "pretest:watch": "docker compose up -d",
    "test": "vitest run",
    "test:watch": "vitest watch"
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['easy-day-js']",
    "mass_publish_burst": "publisher 'ehindero' pushed 53 packages in the last 15min on npm",
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "shared_repo_different_publisher": "repo 'git+https://github.com/mastra-ai/mastra.git' also claimed by 1 package(s) under different publishers: ['npm/@mastra/perplexity']"
  },
  "time": {
    "created": "2026-05-26T18:36:21.959Z",
    "modified": "2026-06-17T02:22:32.004Z"
  }
}