BEACON

← candidates

npm @superblocksteam/custom-components @1.14.4

score
0.6 med
flagged 2026-06-17 19:19
signals by category
content 1 topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
content
install_script_payload 1.0 install/lifecycle script matches payload regex
topology
no_repo 0.3 package.json has no repository field
dist_tag_anomaly 0.5 dist-tags.latest=1.14.4 but max published is 2.0.132-next.0

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "superblocksteam-admin",
    "nickrttn-sb"
  ],
  "versions": 1554
}

Evidence (package doc at flag time)

{
  "dependencies_count": 2,
  "dist": {
    "integrity": "sha512-heHKyT8m4/sE08cLXm8EbfyV+MmfF4m3to60ArprlzLMJyczx2671bo1C9d7j/I0GkwsMWSGRkeGkj/WMYipEA==",
    "tarball": "https://registry.npmjs.org/@superblocksteam/custom-components/-/custom-components-1.14.4.tgz",
    "unpackedSize": 17567
  },
  "dist-tags": {
    "beta": "2.0.131",
    "latest": "1.14.4",
    "next": "2.0.132-next.0"
  },
  "latest_version": "1.14.4",
  "maintainers": [
    {
      "email": "shared@superblockshq.com",
      "name": "superblocksteam-admin"
    },
    {
      "email": "nick.rutten@superblockshq.com",
      "name": "nickrttn-sb"
    }
  ],
  "num_versions": 1556,
  "repository": null,
  "scripts": {
    "build": "tsc --build",
    "check": "pnpm run lint && pnpm run typecheck",
    "clean": "npm run clean:build && rm -rf node_modules",
    "clean:build": "tsc --build --clean && rm -rf dist tsconfig.tsbuildinfo",
    "dev": "tsc --watch",
    "lint": "eslint . --ext .ts --config .eslintrc.json",
    "lint:fix": "eslint . --ext .ts --config .eslintrc.json --fix",
    "preinstall": "node -e \"if (process.versions.node.split('.')[0] < 20) { console.error('Incompatible Node version: Please use Node.js v16 or higher'); process.exit(1);}\"",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=1.14.4 but max published is 2.0.132-next.0",
    "install_script_payload": "install/lifecycle script matches payload regex",
    "no_repo": "package.json has no repository field"
  },
  "time": {
    "created": "2023-08-08T16:20:04.821Z",
    "modified": "2026-06-18T00:19:44.764Z"
  }
}