npm @infineon/design-system-mcp @39.32.1

score

0.7345 high

flagged 2026-06-05 03:56

signals by category

content 1 topology 4

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

bin_added + no_repo: executable added with no upstream source for review (+0.15)

Signals fired

signal	weight	rationale
content
bin_added	0.8	new bin entry: ['dds-mcp']
topology
no_repo	0.3	package.json has no repository field
dist_tag_anomaly	0.5	dist-tags.latest=39.32.1 but max published is 40.0.0--canary.2303.24456641866.0
mass_publish_burst	0.8	publisher 'mathewre' pushed 5 packages in the last 15min on npm
dependency_added_unknown	0.6	4 new non-watchlisted dep(s): ['@lit-labs/ssr', '@modelcontextprotocol/sdk', 'jsdom', 'zod']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "hboifx",
    "mathewre",
    "turbanp",
    "tishoyanchev",
    "pfafffabian-ifx"
  ],
  "versions": 81
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-ZwwnOgXcdHXpXrSju5GWbUVh+1bELvRediyyxdxmYfP85UGdx8Ruc/f7tlui9fRz21w0zyozTLIj0rN7d/W+MA==",
    "tarball": "https://registry.npmjs.org/@infineon/design-system-mcp/-/design-system-mcp-39.32.1.tgz",
    "unpackedSize": 984046
  },
  "dist-tags": {
    "canary": "39.33.0--canary.2350.26884646579.0",
    "latest": "39.32.1"
  },
  "latest_version": "39.32.1",
  "maintainers": [
    {
      "email": "henning.bomboes@infineon.com",
      "name": "hboifx"
    },
    {
      "email": "renjini.mathews@infineon.com",
      "name": "mathewre"
    },
    {
      "email": "turban.external@infineon.com",
      "name": "turbanp"
    },
    {
      "email": "tihomir.yanchev-EE@infineon.com",
      "name": "tishoyanchev"
    },
    {
      "email": "fabian.pfaff@infineon.com",
      "name": "pfafffabian-ifx"
    }
  ],
  "num_versions": 88,
  "repository": null,
  "scripts": {
    "build": "wireit",
    "bundle": "wireit",
    "copy-assets": "wireit",
    "dev": "node --enable-source-maps ./dist/index.js",
    "extract-components": "wireit",
    "inspect": "npx @modelcontextprotocol/inspector ./dist/index.js",
    "prepublishOnly": "pnpm run build"
  },
  "signal_details": {
    "_amplifiers": [
      "bin_added + no_repo: executable added with no upstream source for review (+0.15)"
    ],
    "bin_added": "new bin entry: ['dds-mcp']",
    "dependency_added_unknown": "4 new non-watchlisted dep(s): ['@lit-labs/ssr', '@modelcontextprotocol/sdk', 'jsdom', 'zod']",
    "dist_tag_anomaly": "dist-tags.latest=39.32.1 but max published is 40.0.0--canary.2303.24456641866.0",
    "mass_publish_burst": "publisher 'mathewre' pushed 5 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field"
  },
  "time": {
    "created": "2026-04-02T11:51:58.706Z",
    "modified": "2026-06-03T12:31:35.817Z"
  }
}