BEACON

← candidates

npm @gitlab/duo-ui @15.37.0

score
0.65 med
flagged 2026-06-22 11:10
signals by category
identity 1 topology 1

maintainers added:

package profile →

Signals fired

signalweightrationale
identity
publisher_unrecognized 0.7 latest published by 'GitLab CI/CD', not in maintainer set
topology
dependency_added_unknown 0.6 2 new non-watchlisted dep(s): ['morphdom', 'remend']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "rob.hunt-gitlab",
    "gitlab-administration",
    "tzallmann",
    "gitlab-bot",
    "apanchal-gitlab",
    "jhope-gitlab",
    "drosse-gitlab"
  ],
  "versions": 233
}

Evidence (package doc at flag time)

{
  "dependencies_count": 15,
  "dist": {
    "integrity": "sha512-QM/XuH+U/bJkQxulW0Rcs3IkGRDuOsi+eFXoJvwWcnWnJKAQmfggBezrza7bZplCXUCN2fJ4wZfQvZv2jKTTBw==",
    "tarball": "https://registry.npmjs.org/@gitlab/duo-ui/-/duo-ui-15.37.0.tgz",
    "unpackedSize": 1745532
  },
  "dist-tags": {
    "latest": "15.37.0"
  },
  "latest_version": "15.37.0",
  "maintainers": [
    {
      "email": "rhunt@gitlab.com",
      "name": "rob.hunt-gitlab"
    },
    {
      "email": "frontend-administration@gitlab.com",
      "name": "gitlab-administration"
    },
    {
      "email": "tzallmann@gitlab.com",
      "name": "tzallmann"
    },
    {
      "email": "incoming+gitlab-com/npm-bot@incoming.gitlab.com",
      "name": "gitlab-bot"
    },
    {
      "email": "apanchal@gitlab.com",
      "name": "apanchal-gitlab"
    },
    {
      "email": "jhope@gitlab.com",
      "name": "jhope-gitlab"
    },
    {
      "email": "drossetti@gitlab.com",
      "name": "drosse-gitlab"
    }
  ],
  "num_versions": 235,
  "repository": {
    "type": "git",
    "url": "git+ssh://git@gitlab.com/gitlab-org/duo-ui.git"
  },
  "scripts": {
    "build": "NODE_ENV=production rollup -c",
    "clean": "rm -r dist storybook src/scss/utilities.scss",
    "eslint": "eslint --max-warnings 0 --ext .js,.vue .",
    "eslint:fix": "yarn eslint --fix",
    "generate:component": "plop",
    "lint": "run-p prettier eslint stylelint markdownlint",
    "lint:fix": "run-s eslint:fix prettier:fix stylelint:fix markdownlint:fix",
    "markdownlint": "markdownlint '**/*.md' --ignore node_modules --ignore CHANGELOG.md --ignore",
    "markdownlint:fix": "yarn markdownlint --fix",
    "prettier": "prettier --check '**/*.{js,mjs,ts,vue}'",
    "prettier:fix": "prettier --write '**/*.{js,mjs,ts,vue}'",
    "start": "yarn storybook",
    "storybook": "storybook dev --ci --host ${STORYBOOK_HOST:-localhost} --port 9001 -c .storybook",
    "storybook-vue3": "VUE_VERSION=3 storybook dev --ci --host ${STORYBOOK_HOST:-localhost} --port 9001 -c .storybook",
    "storybook:build:prod": "storybook build -c .storybook -o storybook",
    "storybook:build:test": "yarn build && IS_VISUAL_TEST=true NODE_ENV=test storybook build --test -c .storybook -o storybook",
    "storybook:run": "npx http-server -bgs -p 9001 ./storybook",
    "stylelint": "stylelint 'src/**/*.scss'",
    "stylelint:fix": "yarn stylelint --fix",
    "sync:gdk": "scripts/sync-to-gdk.sh",
    "sync:gdk:watch": "scripts/sync-to-gdk.sh --watch",
    "tailwind-config-viewer:export": "tailwind-config-viewer export ./tailwind-config-viewer-static",
    "tailwind-config-viewer:start": "tailwind-config-viewer -o",
    "test": "run-s test:unit test:visual",
    "test:integration": "yarn run test:integration:server",
    "test:integration:server": "NODE_ENV=test start-test storybook:run http-get://${STORYBOOK_HOST:-localhost}:9001/iframe.html",
    "test:unit": "NODE_ENV=test jest",
    "test:unit-vue3": "VUE_VERSION=3 NODE_ENV=test jest",
    "test:unit-vue3:coverage": "VUE_VERSION=3 yarn test:unit --coverage",
    "test:unit-vue3:debug": "VUE_VERSION=3 NODE_ENV=test node --inspect node_modules/.bin/jest --testPathIgnorePatterns storyshot.spec.js --watch --runInBand",
    "test:unit-vue3:watch": "VUE_VERSION=3 yarn test:unit --watch",
    "test:unit:coverage": "yarn test:unit --coverage",
    "test:unit:debug": "NODE_ENV=test node --inspect node_modules/.bin/jest --testPathIgnorePatterns storyshot.spec.js --watch --runInBand",
    "test:unit:watch": "yarn test:unit --watch",
    "test:visual": "./bin/run-visual-tests.sh 'test-storybook --browsers firefox --verbose --url http://localhost:9001'",
    "test:visual:internal": "NODE_ENV=test IS_VISUAL_TEST=true start-test storybook:run http-get://${STORYBOOK_HOST:-localhost}:9001/iframe.html",
    "test:visual:update": "./bin/run-visual-tests.sh 'test-storybook -u --browsers firefox --verbose --url http://localhost:9001'",
    "translations:collect": "make translations.js"
  },
  "signal_details": {
    "dependency_added_unknown": "2 new non-watchlisted dep(s): ['morphdom', 'remend']",
    "publisher_unrecognized": "latest published by 'GitLab CI/CD', not in maintainer set"
  },
  "time": {
    "created": "2024-10-25T09:44:53.558Z",
    "modified": "2026-06-22T16:10:12.353Z"
  }
}