npm @bytecodealliance/jco @1.24.2
score
0.75
high
flagged
2026-06-18 23:38
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/bytecodealliance/jco.git' also claimed by 3 package(s) under different publishers: ['npm/@bytecodealliance/jco-transpile', 'npm/@bytecodealliance/preview2-shim', 'npm/@bytecodealliance/preview3-shim'] |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['@bytecodealliance/jco-transpile'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"tschneidereit",
"cfallin",
"guybedford",
"vados"
],
"versions": 113
}
Evidence (package doc at flag time)
{
"dependencies_count": 10,
"dist": {
"integrity": "sha512-RBxDAOBOBH/C46GpPrV/2GGDvolF8r3U7HkbGWU5f99RPM8bREKAWl6reaVpSElgKpbLpmXEuW9AoX52pphuVA==",
"tarball": "https://registry.npmjs.org/@bytecodealliance/jco/-/jco-1.24.2.tgz",
"unpackedSize": 209345
},
"dist-tags": {
"latest": "1.24.2",
"rc": "1.17.9-rc.0"
},
"latest_version": "1.24.2",
"maintainers": [
{
"email": "till@tillschneidereit.net",
"name": "tschneidereit"
},
{
"email": "chris@cfallin.org",
"name": "cfallin"
},
{
"email": "guybedford@gmail.com",
"name": "guybedford"
},
{
"email": "vados@vadosware.io",
"name": "vados"
}
],
"num_versions": 114,
"repository": {
"type": "git",
"url": "git+https://github.com/bytecodealliance/jco.git"
},
"scripts": {
"build": "cargo xtask build debug",
"build:release": "cargo xtask build release",
"build:test:components": "cargo xtask build-test-components",
"build:ts": "tsc -p tsconfig.json",
"build:types:preview2-shim": "pnpm run build:types:preview2-shim --include-workspace-root",
"fmt": "oxfmt",
"fmt:check": "oxfmt --check",
"lint": "oxlint",
"lint:fix": "oxlint --fix",
"test": "vitest run -c test/vitest.ts",
"test:extended": "vitest run -c test/vitest.extended.ts",
"test:lts": "vitest run -c test/vitest.lts.ts"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['@bytecodealliance/jco-transpile']",
"shared_repo_different_publisher": "repo 'git+https://github.com/bytecodealliance/jco.git' also claimed by 3 package(s) under different publishers: ['npm/@bytecodealliance/jco-transpile', 'npm/@bytecodealliance/preview2-shim', 'npm/@bytecodealliance/preview3-shim']"
},
"time": {
"created": "2023-02-17T02:16:54.158Z",
"modified": "2026-06-18T14:04:15.717Z"
}
}