BEACON

← candidates

npm 3router @0.2.2

score
0.6117 med
flagged 2026-06-20 09:14
signals by category
content 2 topology 2

maintainers added:

package profile →

amplifiers co-occurring signal pairs that lift the final score

Signals fired

signalweightrationale
content
new_install_script 1.0 first time ['postinstall'] present
provenance_dropped 0.8 prior version published with SLSA attestation; current version has none
topology
typosquat 1.0 lev=1 to watched '9router'
dependency_added_unknown 0.6 1 new non-watchlisted dep(s): ['consola']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "jonny1994"
  ],
  "versions": 2
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-fXubFMCqqkgw6qvIPH637G9to4gyPbLoyRAep5fPyjS2dKX59WBRNKnbC32iB1dehaEJqzHMP6AN2X3wRyDhkQ==",
    "tarball": "https://registry.npmjs.org/3router/-/3router-0.2.2.tgz",
    "unpackedSize": 8458
  },
  "dist-tags": {
    "latest": "0.2.2"
  },
  "latest_version": "0.2.2",
  "maintainers": [
    {
      "email": "c1043870470@gmail.com",
      "name": "jonny1994"
    }
  ],
  "num_versions": 3,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/Jonny-china/3router.git"
  },
  "scripts": {
    "build": "pnpm build:web && pnpm build:copy-web && pnpm build:compile",
    "build:compile": "bun scripts/build-compile.ts",
    "build:copy-web": "rm -rf dist-web && cp -r web/dist dist-web",
    "build:web": "cd web && pnpm build",
    "dev": "bun run --watch src/cli.ts serve",
    "format": "oxfmt src/ web/src/",
    "format:check": "oxfmt --check src/ web/src/",
    "lint": "oxlint src/ web/src/",
    "postinstall": "node install.js",
    "prepublishOnly": "npm run typecheck",
    "test": "bun test",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "_amplifiers": [
      "typosquat + new_install_script: typosquat shape with active payload or stub-rush surface (+0.15)"
    ],
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['consola']",
    "new_install_script": "first time ['postinstall'] present",
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "typosquat": "lev=1 to watched '9router'"
  },
  "time": {
    "created": "2026-06-18T17:33:28.462Z",
    "modified": "2026-06-20T14:14:39.405Z"
  }
}