BEACON

← candidates

npm @dxos/lock-file @0.9.0

score
0.58 med
flagged 2026-06-19 04:16
signals by category
content 2 topology 3

maintainers added: —

package profile →

Signals fired

signalweightrationale
content
license_changed 0.4 'MIT' -> 'FSL-1.1-Apache-2.0'
size_spike 0.5 unpackedSize 18569 -> 205244 (11.1×)
topology
dist_tag_anomaly 0.5 dist-tags.latest=0.9.0 but max published is 0.9.1-main.c7dcc2e112
shared_repo_different_publisher 0.9 repo 'git+https://github.com/dxos/dxos.git' also claimed by 10 package(s) under different publishers: ['npm/@dxos/echo-generator', 'npm/@dxos/effect', 'npm/@dxos/graph'] ...
dependency_added_unknown 0.6 1 new non-watchlisted dep(s): ['koffi']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "richburdon",
    "marik_d",
    "wittjosiah",
    "dxos-bot",
    "mykola-vrmchk"
  ],
  "versions": 2293
}

Evidence (package doc at flag time)

{
  "dependencies_count": 3,
  "dist": {
    "integrity": "sha512-2mPXojnxPvkwtJzaARrCcbaFNbSpLejjGB1KBSixQwD9LSQ7guBVPGS2t4OE1IV6OWO/eZSMTwz/t3MkmpU0qA==",
    "tarball": "https://registry.npmjs.org/@dxos/lock-file/-/lock-file-0.9.0.tgz",
    "unpackedSize": 205244
  },
  "dist-tags": {
    "labs": "0.7.5-labs.d199c0f",
    "latest": "0.9.0",
    "main": "0.9.1-main.c7dcc2e112",
    "next": "0.8.4-staging.60fe92afc8"
  },
  "latest_version": "0.9.0",
  "maintainers": [
    {
      "email": "rich.burdon@gmail.com",
      "name": "richburdon"
    },
    {
      "email": "maretskii@gmail.com",
      "name": "marik_d"
    },
    {
      "email": "josiah@witt.life",
      "name": "wittjosiah"
    },
    {
      "email": "bot@dxos.org",
      "name": "dxos-bot"
    },
    {
      "email": "veremchukmukola@gmail.com",
      "name": "mykola-vrmchk"
    }
  ],
  "num_versions": 2295,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/dxos/dxos.git"
  },
  "scripts": null,
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['koffi']",
    "dist_tag_anomaly": "dist-tags.latest=0.9.0 but max published is 0.9.1-main.c7dcc2e112",
    "license_changed": "'MIT' -> 'FSL-1.1-Apache-2.0'",
    "shared_repo_different_publisher": "repo 'git+https://github.com/dxos/dxos.git' also claimed by 10 package(s) under different publishers: ['npm/@dxos/echo-generator', 'npm/@dxos/effect', 'npm/@dxos/graph'] ...",
    "size_spike": "unpackedSize 18569 -> 205244 (11.1\u00d7)"
  },
  "time": {
    "created": "2023-07-13T09:59:00.553Z",
    "modified": "2026-06-19T09:16:18.556Z"
  }
}