← candidates

npm @agenticprimitives/key-custody @1.0.0-alpha.10

Signals fired

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "richcanvas"
  ],
  "versions": 8
}

Evidence (package doc at flag time)

{
  "dependencies_count": 2,
  "dist": {
    "integrity": "sha512-vAamZSWxAznrJEEIkeAVM61PfXaNTqO3I/Bs8jZC2SmXSrohVN9hd/gVo1j0NL7/1r3zEzf94Gfx6Nufm44bmw==",
    "tarball": "https://registry.npmjs.org/@agenticprimitives/key-custody/-/key-custody-1.0.0-alpha.10.tgz",
    "unpackedSize": 203183
  },
  "dist-tags": {
    "alpha": "0.1.0-alpha.2",
    "latest": "1.0.0-alpha.10"
  },
  "latest_version": "1.0.0-alpha.10",
  "maintainers": [
    {
      "email": "richardpedersen3@gmail.com",
      "name": "richcanvas"
    }
  ],
  "num_versions": 9,
  "repository": {
    "directory": "packages/key-custody",
    "type": "git",
    "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git"
  },
  "scripts": {
    "build": "tsc -p tsconfig.build.json",
    "clean": "rm -rf dist",
    "test": "vitest run",
    "test:integration": "vitest run test/integration --passWithNoTests",
    "test:unit": "vitest run test/unit --passWithNoTests",
    "test:watch": "vitest",
    "typecheck": "tsc -p tsconfig.json --noEmit"
  },
  "signal_details": {
    "bin_added": "new bin entry: ['ap-provision-gcp']",
    "repo_too_new_for_version_history": "claimed repo created 28d ago but package has 9 versions (expect >= 57d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/agentictrustlabs/agenticprimitives.git' also claimed by 10 package(s) under different publishers: ['npm/@agenticprimitives/identity-directory', 'npm/@agenticprimitives/attestations', 'npm/@agenticprimitives/intent-marketplace'] ..."
  },
  "time": {
    "created": "2026-05-31T17:12:51.465Z",
    "modified": "2026-06-17T00:56:41.145Z"
  }
}