npm @ama-sdk/mcp @14.4.3
score
0.6982
med
flagged
2026-07-11 09:22
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=14.4.3 but max published is 14.6.0-prerelease.0 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/AmadeusITGroup/otter.git' also claimed by 10 package(s) under different publishers: ['npm/@o3r/mobile', 'npm/@o3r/core', 'npm/@o3r/pipeline'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"kpanot",
"jbourgeois-1a",
"vscaiceanu-1a",
"nicohoffmann",
"mrednic-1a",
"sdo-1a",
"fpaul_1a",
"matthieucrouzet-1a"
],
"versions": 97
}
Evidence (package doc at flag time)
{
"dependencies_count": 6,
"dist": {
"integrity": "sha512-TOPdO27TE+tV626pWvs2RLtun51Iohj+mKsZu9r/Z7SW21ViY3rSWUiIt2xN4i6YXcWZjEKNeQRaUtY952BWlg==",
"tarball": "https://registry.npmjs.org/@ama-sdk/mcp/-/mcp-14.4.3.tgz",
"unpackedSize": 40661
},
"dist-tags": {
"latest": "14.4.3",
"prerelease": "14.6.0-prerelease.21",
"rc": "14.5.0-rc.2"
},
"latest_version": "14.4.3",
"maintainers": [
{
"email": "kilian.panot@amadeus.com",
"name": "kpanot"
},
{
"email": "jeremy.bourgeois@amadeus.com",
"name": "jbourgeois-1a"
},
{
"email": "victor.scaiceanu@amadeus.com",
"name": "vscaiceanu-1a"
},
{
"email": "nicolas.hoffmann@amadeus.com",
"name": "nicohoffmann"
},
{
"email": "mircea.rednic@amadeus.com",
"name": "mrednic-1a"
},
{
"email": "salome.do@amadeus.com",
"name": "sdo-1a"
},
{
"email": "florian.paul@amadeus.com",
"name": "fpaul_1a"
},
{
"email": "matthieu.crouzet@amadeus.com",
"name": "matthieucrouzet-1a"
}
],
"num_versions": 101,
"repository": {
"type": "git",
"url": "git+https://github.com/AmadeusITGroup/otter.git"
},
"scripts": {
"build": "yarn nx build ama-sdk-mcp",
"compile": "tsc -b ./tsconfig.build.json",
"copy:resources": "yarn cpy resources dist",
"ng": "yarn nx",
"nx": "nx",
"postbuild": "yarn cpy package.json dist && patch-package-json-main"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=14.4.3 but max published is 14.6.0-prerelease.0",
"shared_repo_different_publisher": "repo 'git+https://github.com/AmadeusITGroup/otter.git' also claimed by 10 package(s) under different publishers: ['npm/@o3r/mobile', 'npm/@o3r/core', 'npm/@o3r/pipeline'] ..."
},
"time": {
"created": "2026-05-14T00:26:29.154Z",
"modified": "2026-07-08T10:00:35.031Z"
}
}