npm @trophyso/node @1.16.0

score

0.5408 med

flagged 2026-07-20 02:43

signals by category

topology 2

maintainers added: —

Signals fired

signal	weight	rationale
topology
dist_tag_anomaly	0.5	dist-tags.latest=1.16.0 but max published is 1.17.0-beta
dependency_added_unknown	0.6	4 new non-watchlisted dep(s): ['form-data', 'node-fetch', 'qs', 'url-join']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "jason-trophyso",
    "cbrinicombe13"
  ],
  "versions": 87
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-NGAgohklZavmWz47kfcpbvsan03Ph3fEMn8pQXv50FJet7N8JRFwYxvjdCu3OwLUH8A4CVxNKaYpk9xrmvq/Cw==",
    "tarball": "https://registry.npmjs.org/@trophyso/node/-/node-1.16.0.tgz",
    "unpackedSize": 1608097
  },
  "dist-tags": {
    "beta": "1.17.0-beta",
    "latest": "1.16.0"
  },
  "latest_version": "1.16.0",
  "maintainers": [
    {
      "email": "jason@trophy.so",
      "name": "jason-trophyso"
    },
    {
      "email": "charlie@trophy.so",
      "name": "cbrinicombe13"
    }
  ],
  "num_versions": 92,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/trophyso/trophy-node.git"
  },
  "scripts": {
    "test": "echo \"Error: no test specified\" && exit 1"
  },
  "signal_details": {
    "dependency_added_unknown": "4 new non-watchlisted dep(s): ['form-data', 'node-fetch', 'qs', 'url-join']",
    "dist_tag_anomaly": "dist-tags.latest=1.16.0 but max published is 1.17.0-beta"
  },
  "time": {
    "created": "2025-02-08T12:59:11.235Z",
    "modified": "2026-07-20T07:43:25.328Z"
  }
}