BEACON

← candidates

npm @holistics/cli-core @2.1.11

score
0.9091 high
flagged 2026-06-22 06:35
signals by category
identity 1 cadence 1 enrichment 1

maintainers added:

package profile →

amplifiers co-occurring signal pairs that lift the final score

Signals fired

signalweightrationale
identity
publisher_unrecognized 0.7 latest published by 'CircleCI', not in maintainer set
cadence
rapid_release 0.8 5 versions in last 24h: ['2.1.7', '2.1.8', '2.1.9', '2.1.10', '2.1.11']
enrichment
repo_doesnt_exist 1.0 claimed repo holistics/holistics-core returns 404 on github.com

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "datbth",
    "khanhhuy",
    "cuong-vuong-holistics",
    "trietphm",
    "holistics-npm"
  ],
  "versions": 79
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-t4+vKskWz7ImZPIo24PAAjID8WuUlEuMuH/ah8OA9LFMKBYFRRFvblrg7UFroKx9JQ+DKtERb9Ccg9lnjZZurA==",
    "tarball": "https://registry.npmjs.org/@holistics/cli-core/-/cli-core-2.1.11.tgz",
    "unpackedSize": 2883060
  },
  "dist-tags": {
    "latest": "2.1.11"
  },
  "latest_version": "2.1.11",
  "maintainers": [
    {
      "email": "datbth@gmail.com",
      "name": "datbth"
    },
    {
      "email": "khanhhuy.dev@gmail.com",
      "name": "khanhhuy"
    },
    {
      "email": "cuong.vc@holistics.io",
      "name": "cuong-vuong-holistics"
    },
    {
      "email": "triet.phm@gmail.com",
      "name": "trietphm"
    },
    {
      "email": "devops@holistics.io",
      "name": "holistics-npm"
    }
  ],
  "num_versions": 80,
  "repository": {
    "directory": "packages/cli-core",
    "type": "git",
    "url": "git+https://github.com/holistics/holistics-core.git"
  },
  "scripts": {
    "build": "tsc --noEmit && sh bun_build.sh",
    "build:dev": "tsc --noEmit && sh bun_build_dev.sh",
    "coverage": "sh test.sh --coverage",
    "test": "sh test.sh",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "_amplifiers": [
      "rapid_release + publisher_unrecognized: release burst from an unrecognized identity (+0.10)"
    ],
    "publisher_unrecognized": "latest published by 'CircleCI', not in maintainer set",
    "rapid_release": "5 versions in last 24h: ['2.1.7', '2.1.8', '2.1.9', '2.1.10', '2.1.11']",
    "repo_doesnt_exist": "claimed repo holistics/holistics-core returns 404 on github.com"
  },
  "time": {
    "created": "2025-03-21T05:04:56.915Z",
    "modified": "2026-06-22T10:16:39.353Z"
  }
}