BEACON

← candidates

npm @indigoai-us/hq-cli @5.76.0

score
0.875 high
flagged 2026-07-20 06:47
signals by category
identity 1 topology 2 enrichment 1

maintainers added: hq-agent

package profile →

Signals fired

signalweightrationale
identity
maintainer_churn 1.0 added: ['hq-agent']
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/indigoai-us/hq.git' also claimed by 2 package(s) under different publishers: ['npm/@indigoai-us/hq-cloud', 'npm/create-hq']
dependency_added_unknown 0.6 3 new non-watchlisted dep(s): ['@aws-sdk/client-s3', 'better-sqlite3', 'smol-toml']
enrichment
repo_doesnt_exist 1.0 claimed repo indigoai-us/hq returns 404 on github.com

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "stefanjohnson",
    "yousuf-indigo"
  ],
  "versions": 123
}

Evidence (package doc at flag time)

{
  "dependencies_count": 13,
  "dist": {
    "integrity": "sha512-Quli3/Ju5l0orGkF4AzGzAZQTdaerp9CepfqW/wM6kdHp5jTGwpqwzQ62uMZTumQ1dgsO9lCcago3XGXyI8Ksg==",
    "tarball": "https://registry.npmjs.org/@indigoai-us/hq-cli/-/hq-cli-5.76.0.tgz",
    "unpackedSize": 4085418
  },
  "dist-tags": {
    "latest": "5.76.0",
    "rc": "5.17.0-sources-rc.2"
  },
  "latest_version": "5.76.0",
  "maintainers": [
    {
      "email": "therealstefan@gmail.com",
      "name": "stefanjohnson"
    },
    {
      "email": "Yousuf@getindigo.ai",
      "name": "yousuf-indigo"
    },
    {
      "email": "stefan@hqforwork.com",
      "name": "hq-agent"
    }
  ],
  "num_versions": 159,
  "repository": {
    "directory": "packages/hq-cli",
    "type": "git",
    "url": "git+https://github.com/indigoai-us/hq.git"
  },
  "scripts": {
    "build": "node scripts/generate-dsn.mjs && tsc && node scripts/chmod-bins.mjs",
    "clean": "rm -rf dist",
    "coverage": "vitest run --coverage --coverage.reporter=text-summary --coverage.reporter=json-summary",
    "gen:scan-golden": "node scripts/generate-scan-packages-table.mjs > src/utils/__fixtures__/scan-packages.generated-block.sh",
    "lint": "eslint .",
    "prepublishOnly": "npm run build",
    "test": "vitest run",
    "test:db": "vitest run src/lib/db test/commands/db.test.ts test/commands/db-tenant-isolation.test.ts",
    "test:e2e": "vitest run --config vitest.e2e.config.ts",
    "typecheck": "tsc --noEmit",
    "vitest": "vitest"
  },
  "signal_details": {
    "dependency_added_unknown": "3 new non-watchlisted dep(s): ['@aws-sdk/client-s3', 'better-sqlite3', 'smol-toml']",
    "maintainer_churn": "added: ['hq-agent']",
    "repo_doesnt_exist": "claimed repo indigoai-us/hq returns 404 on github.com",
    "shared_repo_different_publisher": "repo 'git+https://github.com/indigoai-us/hq.git' also claimed by 2 package(s) under different publishers: ['npm/@indigoai-us/hq-cloud', 'npm/create-hq']"
  },
  "time": {
    "created": "2026-02-16T18:12:55.339Z",
    "modified": "2026-07-20T11:47:06.240Z"
  }
}