BEACON

← candidates

npm vite-plugin-taro-react @0.1.8

score
0.5356 med
flagged 2026-06-22 01:12
signals by category
cadence 1 topology 3 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 9 versions in last 24h: ['0.1.4', '0.1.5', '0.1.6', '0.1.7', '0.1.8']
topology
typosquat 1.0 combosquat of 'react'
dist_tag_anomaly 0.5 dist-tags.latest=0.1.8 but max published is 4.2.0-react19.0
shared_repo_different_publisher 0.9 repo 'git+https://github.com/sep2/vite-plugin-taro.git' also claimed by 3 package(s) under different publishers: ['npm/create-vite-taro', 'npm/vite-plugin-taro', 'npm/vite-plugin-taro-plugin-framework-react']
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 2d ago but package has 15 versions (expect >= 70d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "sep2"
  ],
  "versions": 13
}

Evidence (package doc at flag time)

{
  "dependencies_count": 3,
  "dist": {
    "integrity": "sha512-a3oKGwun/Neg3tyav6BW++T+n1HJb0kn92gB2D7f1o56QnxUVhr3Zz9DOtbp+XmkuqZYSn/w/7u8h8Eg8aO+uw==",
    "tarball": "https://registry.npmjs.org/vite-plugin-taro-react/-/vite-plugin-taro-react-0.1.8.tgz",
    "unpackedSize": 123414
  },
  "dist-tags": {
    "latest": "0.1.8"
  },
  "latest_version": "0.1.8",
  "maintainers": [
    {
      "email": "i@lcz.link",
      "name": "sep2"
    }
  ],
  "num_versions": 15,
  "repository": {
    "directory": "packages/taro-react",
    "type": "git",
    "url": "git+https://github.com/sep2/vite-plugin-taro.git"
  },
  "scripts": null,
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=0.1.8 but max published is 4.2.0-react19.0",
    "rapid_release": "9 versions in last 24h: ['0.1.4', '0.1.5', '0.1.6', '0.1.7', '0.1.8']",
    "repo_too_new_for_version_history": "claimed repo created 2d ago but package has 15 versions (expect >= 70d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/sep2/vite-plugin-taro.git' also claimed by 3 package(s) under different publishers: ['npm/create-vite-taro', 'npm/vite-plugin-taro', 'npm/vite-plugin-taro-plugin-framework-react']",
    "typosquat": "combosquat of 'react'"
  },
  "time": {
    "created": "2026-06-20T03:58:12.895Z",
    "modified": "2026-06-22T06:12:33.905Z"
  }
}