npm 5-phase-workflow @2.0.5
score
0.712
high
flagged
2026-06-19 08:29
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| typosquat | 1.0 | combosquat of 'workflow' |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/mrsthl/5.git' also claimed by 1 package(s) under different publishers: ['npm/foifi'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"mrsthl"
],
"versions": 42
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-jbevTYm4aF+MgX/gM16vcyOCcV0ZvguNHf+0jhiRfqKMLEGuJZmLXnT0h8zCPhlC9Bf9O4fjvlAlQ6Q+eSL6Cw==",
"tarball": "https://registry.npmjs.org/5-phase-workflow/-/5-phase-workflow-2.0.5.tgz",
"unpackedSize": 308060
},
"dist-tags": {
"latest": "2.0.5"
},
"latest_version": "2.0.5",
"maintainers": [
{
"email": "maurostehle@gmail.com",
"name": "mrsthl"
}
],
"num_versions": 43,
"repository": {
"type": "git",
"url": "git+https://github.com/mrsthl/5.git"
},
"scripts": {
"test": "bash test/verify-install-js.sh && bash test/test-version-compare.sh && bash test/test-check-updates-hook.sh && bash test/test-update-system.sh",
"test:hook": "bash test/test-check-updates-hook.sh",
"test:install": "bash test/verify-install-js.sh",
"test:update": "bash test/test-update-system.sh",
"test:version": "bash test/test-version-compare.sh",
"verify": "bash test/verify-install-js.sh"
},
"signal_details": {
"shared_repo_different_publisher": "repo 'git+https://github.com/mrsthl/5.git' also claimed by 1 package(s) under different publishers: ['npm/foifi']",
"typosquat": "combosquat of 'workflow'"
},
"time": {
"created": "2026-02-02T08:55:02.980Z",
"modified": "2026-06-19T13:29:36.276Z"
}
}