npm @snyk/snyk-cocoapods-plugin @3.1.1

score

0.6168 med

flagged 2026-06-22 11:16

signals by category

identity 1 cadence 1

maintainers added: snyk-admin

package profile →

amplifiers co-occurring signal pairs that lift the final score

dormant_burst + publisher_unrecognized: classic ATO: dormant package taken over and republished (+0.20)

Signals fired

signal	weight	rationale
identity
publisher_unrecognized	0.7	latest published by 'CircleCI', not in maintainer set
cadence
dormant_burst	1.0	dormant 314d (prev 3.1.0), then 3.1.1 just published

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [],
  "versions": 0
}

Evidence (package doc at flag time)

{
  "dependencies_count": 6,
  "dist": {
    "integrity": "sha512-d0Il5JoRL6ynRHRuODnUPm4WqacL4Mhy2CrWG988MZ43+dGpAWAZa775dAAhkP1k7u1h74YArPqx2M6KQnozQQ==",
    "tarball": "https://registry.npmjs.org/@snyk/snyk-cocoapods-plugin/-/snyk-cocoapods-plugin-3.1.1.tgz",
    "unpackedSize": 21690
  },
  "dist-tags": {
    "latest": "3.1.1"
  },
  "latest_version": "3.1.1",
  "maintainers": [
    {
      "email": "npmjs+snyk-admin@snyk.io",
      "name": "snyk-admin"
    }
  ],
  "num_versions": 21,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/snyk/snyk-cocoapods-plugin.git"
  },
  "scripts": {
    "build": "tsc",
    "build-watch": "tsc -w",
    "format": "prettier --write '{*,{lib,test}/!(fixtures)/**/*}.{js,ts,json,yml}'",
    "format:check": "prettier --check '{*,{lib,test}/!(fixtures)/**/*}.{js,ts,json,yml}'",
    "lint": "npm run format:check && npm run lint:eslint",
    "lint:eslint": "eslint 'lib/**/*.ts' && (cd test && eslint '**/*.ts')",
    "prepare": "npm run build",
    "test": "npm run lint && npm run test:unit",
    "test:coverage": "npm run test:unit -- --coverage",
    "test:unit": "jest",
    "test:watch": "tsc-watch --onSuccess 'npm run test:unit'"
  },
  "signal_details": {
    "_amplifiers": [
      "dormant_burst + publisher_unrecognized: classic ATO: dormant package taken over and republished (+0.20)"
    ],
    "dormant_burst": "dormant 314d (prev 3.1.0), then 3.1.1 just published",
    "publisher_unrecognized": "latest published by 'CircleCI', not in maintainer set"
  },
  "time": {
    "created": "2019-09-27T14:31:47.195Z",
    "modified": "2026-06-22T16:16:41.658Z"
  }
}