BEACON

← candidates

npm payload @3.85.1

score
0.7333 high
flagged 2026-06-17 14:45
signals by category
topology 3

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
dist_tag_anomaly 0.5 dist-tags.latest=3.85.1 but max published is 4.0.0-internal.5b1e7cd
mass_publish_burst 0.8 publisher 'elliotpayload' pushed 10 packages in the last 15min on npm
shared_repo_different_publisher 0.9 repo 'git+https://github.com/payloadcms/payload.git' also claimed by 1 package(s) under different publishers: ['npm/payload-plugin-mcp-granular']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "payloadjs",
    "german.jablo",
    "elliotpayload",
    "danribbens",
    "seanpayload",
    "jmikrut",
    "jacobsfletch",
    "alessiogr",
    "patrikkozak",
    "jarrodmflesch"
  ],
  "versions": 1814
}

Evidence (package doc at flag time)

{
  "dependencies_count": 31,
  "dist": {
    "integrity": "sha512-vfnqwwMOru9wpdiFB3gyb6B+gUt7cjE8+YiNn1g+26dPOyGkAZa9U1QmCMSZfgARj5H42llElQHQw9WX3lYbIw==",
    "tarball": "https://registry.npmjs.org/payload/-/payload-3.85.1.tgz",
    "unpackedSize": 7368575
  },
  "dist-tags": {
    "beta": "3.0.0-beta.135",
    "canary": "4.0.0-canary.2",
    "internal": "4.0.0-internal.293e026",
    "internal-debug": "3.81.0-internal-debug.1a0f4d0",
    "latest": "3.85.1",
    "payload-1": "1.15.12",
    "payload-2": "2.32.3"
  },
  "latest_version": "3.85.1",
  "maintainers": [
    {
      "email": "dev@payloadcms.com",
      "name": "payloadjs"
    },
    {
      "email": "german.jablo@gmail.com",
      "name": "german.jablo"
    },
    {
      "email": "elliot@payloadcms.com",
      "name": "elliotpayload"
    },
    {
      "email": "dan.ribbens@gmail.com",
      "name": "danribbens"
    },
    {
      "email": "sean@payloadcms.com",
      "name": "seanpayload"
    },
    {
      "email": "james@payloadcms.com",
      "name": "jmikrut"
    },
    {
      "email": "jacobsfletch@gmail.com",
      "name": "jacobsfletch"
    },
    {
      "email": "npm@gravili.net",
      "name": "alessiogr"
    },
    {
      "email": "patrik@payloadcms.com",
      "name": "patrikkozak"
    },
    {
      "email": "jarrodmflesch@gmail.com",
      "name": "jarrodmflesch"
    }
  ],
  "num_versions": 1814,
  "repository": {
    "directory": "packages/payload",
    "type": "git",
    "url": "git+https://github.com/payloadcms/payload.git"
  },
  "scripts": {
    "build": "rimraf .dist && rimraf tsconfig.tsbuildinfo && pnpm copyfiles && pnpm build:types && pnpm build:swc && pnpm bundle:types && echo skipping esbuild",
    "build:bundle-for-analysis": "node ./bundle.js esbuild",
    "build:debug": "pnpm build",
    "build:swc": "swc ./src -d ./dist --config-file .swcrc --strip-leading-paths",
    "build:types": "tsc --emitDeclarationOnly --outDir dist",
    "bundle:types": "rollup -c rollup.dts.config.mjs",
    "clean": "rimraf -g {dist,*.tsbuildinfo}",
    "clean:cache": "rimraf node_modules/.cache",
    "copyfiles": "copyfiles -u 1 \"src/**/*.{html,ttf,woff,woff2,eot,svg,jpg,png,json}\" dist/",
    "lint": "eslint .",
    "lint:fix": "eslint . --fix",
    "pretest": "pnpm build"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=3.85.1 but max published is 4.0.0-internal.5b1e7cd",
    "mass_publish_burst": "publisher 'elliotpayload' pushed 10 packages in the last 15min on npm",
    "shared_repo_different_publisher": "repo 'git+https://github.com/payloadcms/payload.git' also claimed by 1 package(s) under different publishers: ['npm/payload-plugin-mcp-granular']"
  },
  "time": {
    "created": "2015-02-25T10:17:37.430Z",
    "modified": "2026-06-16T16:04:31.235Z"
  }
}