BEACON

← candidates

npm vercel @56.4.0

score
0.75 high
flagged 2026-07-20 09:56
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/vercel/vercel.git' also claimed by 10 package(s) under different publishers: ['npm/@vercel/redwood', 'npm/@vercel/aws', 'npm/@vercel/build-utils'] ...
dependency_added_unknown 0.6 3 new non-watchlisted dep(s): ['@vercel/container', 'jsonc-parser', 'undici']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "matheuss",
    "rauchg",
    "matt.straka",
    "vercel-release-bot",
    "zeit-bot"
  ],
  "versions": 1004
}

Evidence (package doc at flag time)

{
  "dependencies_count": 35,
  "dist": {
    "integrity": "sha512-kBNkguWeUva8l1eD0CkTH8l4yiGW1iymJcWG93YDMmZELJ9wha96eeaZWJKxUiy+wBcza6b+bQ1ympd7wNQPkA==",
    "tarball": "https://registry.npmjs.org/vercel/-/vercel-56.4.0.tgz",
    "unpackedSize": 9647059
  },
  "dist-tags": {
    "canary": "51.7.0",
    "latest": "56.4.0"
  },
  "latest_version": "56.4.0",
  "maintainers": [
    {
      "email": "matheus.frndes@gmail.com",
      "name": "matheuss"
    },
    {
      "email": "rauchg@gmail.com",
      "name": "rauchg"
    },
    {
      "email": "matt.j.straka@gmail.com",
      "name": "matt.straka"
    },
    {
      "email": "infra+release@vercel.com",
      "name": "vercel-release-bot"
    },
    {
      "email": "team@zeit.co",
      "name": "zeit-bot"
    }
  ],
  "num_versions": 1033,
  "repository": {
    "directory": "packages/cli",
    "type": "git",
    "url": "git+https://github.com/vercel/vercel.git"
  },
  "scripts": {
    "build": "node scripts/build.mjs",
    "build-binary": "pnpm --filter vercel... build && node scripts/build-binary.mjs",
    "build-binary-node": "node scripts/build-binary-node.mjs",
    "build-binary:host": "pnpm --filter vercel... build && node scripts/build-binary.mjs --target host --output ./dist-bin/vercel",
    "coverage": "codecov",
    "dev": "echo \"'pnpm dev [command]' has been removed. Use 'pnpm vercel [command]' instead.\" && exit 1",
    "smoke-binary": "node scripts/smoke-test-binary.mjs",
    "test": "vitest run --config ./vitest.config.mts",
    "test-dev": "pnpm test test/dev/",
    "test-e2e-node-all-versions": "rimraf test/fixtures/integration && pnpm test test/integration-1.test.ts test/integration-2.test.ts test/integration-3.test.ts test/integration-link-env-pull.test.ts",
    "test:evals": "tsx evals/run.ts",
    "test:evals:dry": "tsx evals/run.ts --dry",
    "test:evals:local-fixture": "tsx evals/run.ts --local-fixture",
    "test:evals:smoke": "tsx evals/run.ts smoke --smoke",
    "type-check": "tsc --noEmit",
    "vc": "pnpm vercel",
    "vercel": "pnpm build && node ./dist/vc.js",
    "vitest-run": "node scripts/vitest-run.mjs",
    "vitest-unit": "glob --absolute 'test/unit/**/*.test.ts'"
  },
  "signal_details": {
    "dependency_added_unknown": "3 new non-watchlisted dep(s): ['@vercel/container', 'jsonc-parser', 'undici']",
    "shared_repo_different_publisher": "repo 'git+https://github.com/vercel/vercel.git' also claimed by 10 package(s) under different publishers: ['npm/@vercel/redwood', 'npm/@vercel/aws', 'npm/@vercel/build-utils'] ..."
  },
  "time": {
    "created": "2020-03-03T22:21:08.947Z",
    "modified": "2026-07-20T14:56:04.431Z"
  }
}