BEACON

← candidates

npm vaultlier @0.1.22

score
0.5019 med
flagged 2026-06-20 10:43
signals by category
content 2 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
content
script_count_spike 0.5 scripts count 11 -> 17
provenance_dropped 0.8 prior version published with SLSA attestation; current version has none
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 9d ago but package has 16 versions (expect >= 72d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "degolojan"
  ],
  "versions": 14
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-tmTIOpjltVRRJraVb9loNeAkBpw79oHTD+qSTSeBtD35gb3sVc+ORpV8FzlD0nDDP5aqlF62e6uzoMrGxvycag==",
    "tarball": "https://registry.npmjs.org/vaultlier/-/vaultlier-0.1.22.tgz",
    "unpackedSize": 454358
  },
  "dist-tags": {
    "latest": "0.1.22"
  },
  "latest_version": "0.1.22",
  "maintainers": [
    {
      "email": "degolojantechnologies@gmail.com",
      "name": "degolojan"
    }
  ],
  "num_versions": 16,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/aguchux/vaultlier.git"
  },
  "scripts": {
    "build": "npm run build:js && npm run build:types",
    "build:js": "tsup",
    "build:types": "tsc -p tsconfig.build.json",
    "check-types": "tsc --noEmit",
    "clean": "node -e \"for (const p of ['dist', '.turbo', 'coverage']) require('node:fs').rmSync(p, { recursive: true, force: true })\"",
    "dev": "tsup --watch",
    "format": "prettier --write \"**/*.{js,cjs,mjs,ts,tsx,json,jsonc,css,md,mdx,yml,yaml}\"",
    "format:check": "prettier --check \"**/*.{js,cjs,mjs,ts,tsx,json,jsonc,css,md,mdx,yml,yaml}\"",
    "lint": "eslint . --max-warnings 0",
    "prepublishOnly": "npm run build",
    "test": "vitest run",
    "test:coverage": "vitest run --coverage",
    "test:watch": "vitest",
    "version:major": "npm version major --no-git-tag-version",
    "version:minor": "npm version minor --no-git-tag-version",
    "version:patch": "npm version patch --no-git-tag-version",
    "version:vaultlier": "npm version --no-git-tag-version"
  },
  "signal_details": {
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "repo_too_new_for_version_history": "claimed repo created 9d ago but package has 16 versions (expect >= 72d for that history)",
    "script_count_spike": "scripts count 11 -> 17"
  },
  "time": {
    "created": "2026-06-10T21:36:17.138Z",
    "modified": "2026-06-20T15:43:39.203Z"
  }
}