npm snyk-docker-plugin @9.15.0

score

0.8333 high

flagged 2026-06-22 14:49

signals by category

identity 1 cadence 1 topology 1

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

rapid_release + publisher_unrecognized: release burst from an unrecognized identity (+0.10)

Signals fired

signal	weight	rationale
identity
publisher_unrecognized	0.7	latest published by 'CircleCI', not in maintainer set
cadence
rapid_release	0.8	4 versions in last 24h: ['9.12.0', '9.13.0', '9.14.0', '9.15.0']
topology
typosquat	1.0	combosquat of 'snyk'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "snyk-admin"
  ],
  "versions": 440
}

Evidence (package doc at flag time)

{
  "dependencies_count": 25,
  "dist": {
    "integrity": "sha512-uxytTQusfRatnrUxp6X3pQmjUC7HSKSqVp6hPrBKvCWl/MKW7pNfawKCOLf0U1h/uXZ2XlbRmwmePk5zKe5aVw==",
    "tarball": "https://registry.npmjs.org/snyk-docker-plugin/-/snyk-docker-plugin-9.15.0.tgz",
    "unpackedSize": 1076123
  },
  "dist-tags": {
    "hotfix": "6.13.0-hotfix",
    "latest": "9.15.0",
    "release-9.1.x": "9.1.4"
  },
  "latest_version": "9.15.0",
  "maintainers": [
    {
      "email": "npmjs+snyk-admin@snyk.io",
      "name": "snyk-admin"
    }
  ],
  "num_versions": 442,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/snyk/snyk-docker-plugin.git"
  },
  "scripts": {
    "build": "tsc",
    "build-watch": "tsc -w",
    "debug": "tsc-watch --project tsconfig.json --onSuccess 'node --inspect --inspect-brk .'",
    "format": "prettier --loglevel warn --write '{lib,test}/**/*.ts' && eslint --fix '{lib,test}/**/*.ts'",
    "lint": "run-p --max-parallel=${JOBS:-5} --aggregate-output lint:*",
    "lint:commit": "commitlint --from=HEAD~1",
    "lint:eslint": "eslint \"{lib,test}/**/*.ts\"",
    "lint:prettier": "prettier --check \"{lib,test}/**/*.ts\"",
    "prepare": "npm run build",
    "test": "jest --logHeapUsage --colors --selectProjects unit system",
    "test:system": "jest --logHeapUsage --colors --selectProjects system",
    "test:unit": "jest --logHeapUsage --colors --selectProjects unit",
    "test:windows": "jest --logHeapUsage --colors --selectProjects windows",
    "test:windows:docker": "jest --logHeapUsage --colors --selectProjects windows-docker"
  },
  "signal_details": {
    "_amplifiers": [
      "rapid_release + publisher_unrecognized: release burst from an unrecognized identity (+0.10)"
    ],
    "publisher_unrecognized": "latest published by 'CircleCI', not in maintainer set",
    "rapid_release": "4 versions in last 24h: ['9.12.0', '9.13.0', '9.14.0', '9.15.0']",
    "typosquat": "combosquat of 'snyk'"
  },
  "time": {
    "created": "2018-03-01T13:18:19.810Z",
    "modified": "2026-06-22T19:49:14.349Z"
  }
}