npm bare-script @4.2.8

score

0.5 med

flagged 2026-06-22 14:21

signals by category

topology 2

maintainers added: —

Signals fired

signal	weight	rationale
topology
no_repo	0.3	package.json has no repository field
typosquat	1.0	combosquat of 'bare'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "craigahobbs"
  ],
  "versions": 106
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-PJlqr4EGunwBhRlP9y26LmNi8L+6+LHkUob0NzvjFEMTUgA896PuxUC4VeluvdXHDEl9Etj86fOPuT7nKJdtBA==",
    "tarball": "https://registry.npmjs.org/bare-script/-/bare-script-4.2.8.tgz",
    "unpackedSize": 591711
  },
  "dist-tags": {
    "latest": "4.2.8"
  },
  "latest_version": "4.2.8",
  "maintainers": [
    {
      "email": "craigahobbs@gmail.com",
      "name": "craigahobbs"
    }
  ],
  "num_versions": 107,
  "repository": null,
  "scripts": {
    "test": "node --test test/"
  },
  "signal_details": {
    "no_repo": "package.json has no repository field",
    "typosquat": "combosquat of 'bare'"
  },
  "time": {
    "created": "2023-08-07T17:12:56.590Z",
    "modified": "2026-06-22T19:21:48.928Z"
  }
}