BEACON

← candidates

npm @lumiastream/govee-cove @3.31.4

score
0.5191 med
flagged 2026-06-22 13:15
signals by category
topology 4

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
no_repo 0.3 package.json has no repository field
dist_tag_anomaly 0.5 dist-tags.latest=3.31.4 but max published is 4.1.0
mass_publish_burst 0.8 publisher 'ahadcove' pushed 27 packages in the last 15min on npm
dependency_added_unknown 0.6 1 new non-watchlisted dep(s): ['@lumiastream/network-cove']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "lumiastreamadmin",
    "ahadcove",
    "uithinker"
  ],
  "versions": 64
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-B73Znv3T0+qxBn+v+sn9nSdta2S25czoYVNuKnDJcXHXjwMjOj4OTjqOBc7/0rMvFDz55rlBOXC2r4/4bNrXsw==",
    "tarball": "https://registry.npmjs.org/@lumiastream/govee-cove/-/govee-cove-3.31.4.tgz",
    "unpackedSize": 66341
  },
  "dist-tags": {
    "beta": "2.0.1-beta.1",
    "latest": "3.31.4"
  },
  "latest_version": "3.31.4",
  "maintainers": [
    {
      "email": "admin@lumiastream.com",
      "name": "lumiastreamadmin"
    },
    {
      "email": "ahadcove@gmail.com",
      "name": "ahadcove"
    },
    {
      "email": "abbouabdeldjebar@gmail.com",
      "name": "uithinker"
    }
  ],
  "num_versions": 66,
  "repository": null,
  "scripts": {
    "build": "tsup --config ../../tsup.config.ts",
    "build:secure": "npm run build && npm run obfuscate",
    "lint": "tsc",
    "obfuscate": "javascript-obfuscator dist --output dist --config ../../obfuscator.config.json"
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['@lumiastream/network-cove']",
    "dist_tag_anomaly": "dist-tags.latest=3.31.4 but max published is 4.1.0",
    "mass_publish_burst": "publisher 'ahadcove' pushed 27 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field"
  },
  "time": {
    "created": "2021-08-02T23:30:12.745Z",
    "modified": "2026-06-22T18:14:57.696Z"
  }
}