npm @verdigris/client @3.0.1

score

0.5177 med

flagged 2026-06-05 05:13

signals by category

identity 2 topology 2

maintainers added: verdigris-service

package profile →

amplifiers co-occurring signal pairs that lift the final score

repository_removed + maintainer_churn: upstream source removed during identity churn (+0.15)

Signals fired

signal	weight	rationale
identity
maintainer_churn	1.0	added: ['verdigris-service']
publisher_unrecognized	0.7	latest published by 'CircleCI', not in maintainer set
topology
no_repo	0.3	package.json has no repository field
repository_removed	1.0	prior repo 'git+ssh://github.com/verdigristech/api.git' no longer in package.json

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "andrew-jo"
  ],
  "versions": 1
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-iIdBy3GXQWgLjpRUFv6a7viTqsuAKocbY26IPwJ1ZSmyFKcUhyRB4mon3Uwtc3ZHVZAKSWgKcZgGHWEURanlUA==",
    "tarball": "https://registry.npmjs.org/@verdigris/client/-/client-3.0.1.tgz",
    "unpackedSize": 1248709
  },
  "dist-tags": {
    "latest": "3.0.1",
    "rc": "3.0.0-rc.0"
  },
  "latest_version": "3.0.1",
  "maintainers": [
    {
      "email": "andrew@verdigris.co",
      "name": "andrew-jo"
    },
    {
      "email": "npm@verdigris.co",
      "name": "verdigris-service"
    }
  ],
  "num_versions": 3,
  "repository": null,
  "scripts": {
    "build": "vite build && pnpm exec dts-bundle-generator --out-file dist/index.d.ts --project tsconfig.build.json --no-check src/index.ts && cp dist/index.d.ts dist/index.d.mts && node scripts/scan-bundle.mjs && node scripts/scan-types.mjs",
    "generate": "tsx scripts/generate-contract.ts",
    "lint": "eslint",
    "prebuild": "pnpm generate",
    "pretest": "pnpm build",
    "pretest:coverage": "pnpm build",
    "smoke": "node scripts/smoke-bundle.mjs",
    "test": "vitest run",
    "test:coverage": "vitest run --coverage",
    "typecheck": "tsc --noEmit",
    "verify": "node scripts/verify-no-server.mjs"
  },
  "signal_details": {
    "_amplifiers": [
      "repository_removed + maintainer_churn: upstream source removed during identity churn (+0.15)"
    ],
    "maintainer_churn": "added: ['verdigris-service']",
    "no_repo": "package.json has no repository field",
    "publisher_unrecognized": "latest published by 'CircleCI', not in maintainer set",
    "repository_removed": "prior repo 'git+ssh://github.com/verdigristech/api.git' no longer in package.json"
  },
  "time": {
    "created": "2026-05-30T04:44:09.528Z",
    "modified": "2026-06-03T18:39:54.042Z"
  }
}