← candidates

npm auth @1.6.19

Signals fired

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "bekacru"
  ],
  "versions": 65
}

Evidence (package doc at flag time)

{
  "dependencies_count": 20,
  "dist": {
    "integrity": "sha512-//+teqmSLQA4l5d02fIZjNYqqwNIbDKrKEyyr6rtZ8aINBTnlvWMiTpX/L5heXeS7oU/DHG30ilFN1/em/P7Zw==",
    "tarball": "https://registry.npmjs.org/auth/-/auth-1.6.19.tgz",
    "unpackedSize": 274546
  },
  "dist-tags": {
    "beta": "1.7.0-beta.9",
    "latest": "1.6.19"
  },
  "latest_version": "1.6.19",
  "maintainers": [
    {
      "email": "Bekacru@gmail.com",
      "name": "bekacru"
    }
  ],
  "num_versions": 65,
  "repository": {
    "directory": "packages/cli",
    "type": "git",
    "url": "git+https://github.com/better-auth/better-auth.git"
  },
  "scripts": {
    "build": "tsdown",
    "coverage": "vitest run --coverage --coverage.provider=istanbul",
    "dev": "tsx ./src/index.ts",
    "lint:package": "publint run --strict --pack false",
    "lint:types": "attw --profile esm-only --pack .",
    "start": "node ./dist/index.mjs",
    "test": "vitest",
    "typecheck": "tsc --project tsconfig.json"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=1.6.19 but max published is 1.7.0-beta.0",
    "shared_repo_different_publisher": "repo 'git+https://github.com/better-auth/better-auth.git' also claimed by 10 package(s) under different publishers: ['npm/@better-auth/i18n', 'npm/@better-auth/expo', 'npm/@better-auth/mcp'] ...",
    "typosquat": "lev=1 to watched 'auth0'"
  },
  "time": {
    "created": "2012-10-28T19:15:48.907Z",
    "modified": "2026-06-20T01:14:50.761Z"
  }
}