BEACON

← candidates

npm @bytecodealliance/jco @1.24.2

score
0.75 high
flagged 2026-06-18 23:38
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/bytecodealliance/jco.git' also claimed by 3 package(s) under different publishers: ['npm/@bytecodealliance/jco-transpile', 'npm/@bytecodealliance/preview2-shim', 'npm/@bytecodealliance/preview3-shim']
dependency_added_unknown 0.6 1 new non-watchlisted dep(s): ['@bytecodealliance/jco-transpile']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "tschneidereit",
    "cfallin",
    "guybedford",
    "vados"
  ],
  "versions": 113
}

Evidence (package doc at flag time)

{
  "dependencies_count": 10,
  "dist": {
    "integrity": "sha512-RBxDAOBOBH/C46GpPrV/2GGDvolF8r3U7HkbGWU5f99RPM8bREKAWl6reaVpSElgKpbLpmXEuW9AoX52pphuVA==",
    "tarball": "https://registry.npmjs.org/@bytecodealliance/jco/-/jco-1.24.2.tgz",
    "unpackedSize": 209345
  },
  "dist-tags": {
    "latest": "1.24.2",
    "rc": "1.17.9-rc.0"
  },
  "latest_version": "1.24.2",
  "maintainers": [
    {
      "email": "till@tillschneidereit.net",
      "name": "tschneidereit"
    },
    {
      "email": "chris@cfallin.org",
      "name": "cfallin"
    },
    {
      "email": "guybedford@gmail.com",
      "name": "guybedford"
    },
    {
      "email": "vados@vadosware.io",
      "name": "vados"
    }
  ],
  "num_versions": 114,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/bytecodealliance/jco.git"
  },
  "scripts": {
    "build": "cargo xtask build debug",
    "build:release": "cargo xtask build release",
    "build:test:components": "cargo xtask build-test-components",
    "build:ts": "tsc -p tsconfig.json",
    "build:types:preview2-shim": "pnpm run build:types:preview2-shim --include-workspace-root",
    "fmt": "oxfmt",
    "fmt:check": "oxfmt --check",
    "lint": "oxlint",
    "lint:fix": "oxlint --fix",
    "test": "vitest run -c test/vitest.ts",
    "test:extended": "vitest run -c test/vitest.extended.ts",
    "test:lts": "vitest run -c test/vitest.lts.ts"
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['@bytecodealliance/jco-transpile']",
    "shared_repo_different_publisher": "repo 'git+https://github.com/bytecodealliance/jco.git' also claimed by 3 package(s) under different publishers: ['npm/@bytecodealliance/jco-transpile', 'npm/@bytecodealliance/preview2-shim', 'npm/@bytecodealliance/preview3-shim']"
  },
  "time": {
    "created": "2023-02-17T02:16:54.158Z",
    "modified": "2026-06-18T14:04:15.717Z"
  }
}