BEACON

← candidates

npm homebridge-tuya-plus @3.13.0

score
0.5687 med
flagged 2026-06-22 19:11
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
typosquat 1.0 combosquat of 'homebridge'
dist_tag_anomaly 0.5 dist-tags.latest=3.13.0 but max published is 3.14.0-beta.1

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "adrianjagielak"
  ],
  "versions": 66
}

Evidence (package doc at flag time)

{
  "dependencies_count": 7,
  "dist": {
    "integrity": "sha512-rJz0vfiYKTYPlc1PX8UN4c4GgRedQ0UZ9ggOKamSTKgwqMlNt4IcbesVGoUgBfXXFhBPnoWR5m21m69ts/8pLg==",
    "tarball": "https://registry.npmjs.org/homebridge-tuya-plus/-/homebridge-tuya-plus-3.13.0.tgz",
    "unpackedSize": 750777
  },
  "dist-tags": {
    "dev": "3.14.0-dev.36",
    "latest": "3.13.0"
  },
  "latest_version": "3.13.0",
  "maintainers": [
    {
      "email": "adrianjagielak@gmail.com",
      "name": "adrianjagielak"
    }
  ],
  "num_versions": 68,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/adrianjagielak/homebridge-tuya-plus.git"
  },
  "scripts": {
    "lint": "eslint index.js lib/**.js bin/**.js",
    "test": "jest"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=3.13.0 but max published is 3.14.0-beta.1",
    "typosquat": "combosquat of 'homebridge'"
  },
  "time": {
    "created": "2025-07-04T12:34:55.401Z",
    "modified": "2026-06-23T00:11:17.196Z"
  }
}