npm @rialo/ts-cdk @0.12.2
score
0.6812
med
flagged
2026-07-20 08:58
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.12.2 but max published is 0.16.0-alpha.0 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/SubzeroLabs/rialo.git' also claimed by 3 package(s) under different publishers: ['npm/@rialo/spl-token', 'npm/@rialo/frost-core', 'npm/@rialo/frost'] |
| enrichment | ||
| repo_doesnt_exist | 1.0 | claimed repo SubzeroLabs/rialo returns 404 on github.com |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"subzerolabs",
"mocutobi",
"subzero_thanos"
],
"versions": 31
}
Evidence (package doc at flag time)
{
"dependencies_count": 9,
"dist": {
"integrity": "sha512-R6/ELnhiAfNwRf3abazK0TGxBQgfDv+Bdnwl42w0Lt/205t6RFHoVUKrgS4ZAZq6TMzbvOi+PvASSPoDEODp5w==",
"tarball": "https://registry.npmjs.org/@rialo/ts-cdk/-/ts-cdk-0.12.2.tgz",
"unpackedSize": 2971288
},
"dist-tags": {
"alpha": "0.16.0-alpha.0",
"latest": "0.12.2"
},
"latest_version": "0.12.2",
"maintainers": [
{
"email": "lu@subzero.xyz",
"name": "subzerolabs"
},
{
"email": "tobi@subzero.xyz",
"name": "mocutobi"
},
{
"email": "thanos@subzero.xyz",
"name": "subzero_thanos"
}
],
"num_versions": 35,
"repository": {
"type": "git",
"url": "git+https://github.com/SubzeroLabs/rialo.git"
},
"scripts": {
"build": "tsup",
"check": "biome check .",
"clean": "rm -rf node_modules dist",
"dev": "tsup --watch",
"format": "biome format . --write",
"lint": "biome lint .",
"prepublishOnly": "npm run build && npm run typecheck",
"test": "vitest run",
"test:coverage": "vitest --coverage",
"test:vectors": "vitest run tests/*-vectors.test.ts",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.12.2 but max published is 0.16.0-alpha.0",
"repo_doesnt_exist": "claimed repo SubzeroLabs/rialo returns 404 on github.com",
"shared_repo_different_publisher": "repo 'git+https://github.com/SubzeroLabs/rialo.git' also claimed by 3 package(s) under different publishers: ['npm/@rialo/spl-token', 'npm/@rialo/frost-core', 'npm/@rialo/frost']"
},
"time": {
"created": "2025-11-21T20:51:51.209Z",
"modified": "2026-07-20T13:58:19.392Z"
}
}