BEACON

← candidates

npm audit-tools @0.33.12

score
0.8 high
flagged 2026-07-20 11:25
signals by category
cadence 1 topology 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 3 versions in last 24h: ['0.33.10', '0.33.11', '0.33.12']
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/OhOkThisIsFine/audit-tools.git' also claimed by 3 package(s) under different publishers: ['npm/remediator-lambda', 'npm/auditor-lambda', 'npm/@audit-tools/shared']
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 52d ago but package has 150 versions (expect >= 130d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "wheatiest"
  ],
  "versions": 150
}

Evidence (package doc at flag time)

{
  "dependencies_count": 5,
  "dist": {
    "integrity": "sha512-bRzUsYiIT1Zwkt+4sGX+hZjw/hFPHv4x2xICXI9ws+FNuxZ10Cnpb6AThkamWhXAhp0HEMm0TmzWL38osdg7Mw==",
    "tarball": "https://registry.npmjs.org/audit-tools/-/audit-tools-0.33.12.tgz",
    "unpackedSize": 9859635
  },
  "dist-tags": {
    "latest": "0.33.12"
  },
  "latest_version": "0.33.12",
  "maintainers": [
    {
      "email": "ethanberlant@gmail.com",
      "name": "wheatiest"
    }
  ],
  "num_versions": 150,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/OhOkThisIsFine/audit-tools.git"
  },
  "scripts": {
    "build": "tsc -p tsconfig.json && node scripts/shared/copy-data-assets.mjs",
    "check": "tsc -p tsconfig.json --noEmit",
    "check:deadcode": "knip --no-config-hints",
    "check:doc-manifest": "node scripts/check-doc-manifest.mjs",
    "fixtures:auditor-contract": "node scripts/remediate/generate-auditor-contract-fixture.mjs",
    "generate-schemas": "node scripts/audit/generate-schemas.mjs",
    "postinstall": "node scripts/postinstall.mjs",
    "prepack": "npm run build",
    "prepublishOnly": "npm run verify:release",
    "release:major": "node scripts/release-and-publish.mjs major --bump-only",
    "release:major:publish": "node scripts/release-and-publish.mjs major",
    "release:minor": "node scripts/release-and-publish.mjs minor --bump-only",
    "release:minor:publish": "node scripts/release-and-publish.mjs minor",
    "release:patch": "node scripts/release-and-publish.mjs patch --bump-only",
    "release:patch:publish": "node scripts/release-and-publish.mjs patch",
    "smoke:linked-audit-code": "node scripts/audit/smoke-linked-audit-code.mjs",
    "smoke:linked-remediate-code": "node scripts/remediate/smoke-linked-remediate-code.mjs",
    "smoke:packaged-audit-code": "node scripts/audit/smoke-packaged-audit-code.mjs",
    "smoke:packaged-remediate-code": "node scripts/remediate/smoke-packaged-remediate-code.mjs",
    "test": "npm run build && vitest run",
    "test:doc-contract": "vitest run tests/audit/release-contract.test.mjs tests/audit/file-lock-doc-sync.test.mjs tests/audit/host-asset-renderer-drift.test.mjs",
    "test:single": "npm run build && vitest run",
    "update-languages": "node scripts/audit/update-languages.mjs",
    "update-models": "node scripts/shared/update-models.mjs",
    "verify:checks": "node scripts/shared/profile-run.mjs verify-checks check:deadcode check:doc-manifest build verify:hosts verify:remediate-hosts smoke:packaged-audit-code smoke:packaged-remediate-code",
    "verify:guards": "vitest run --retry=2 --exclude \"**/audit-code-completion.test.mjs\" --exclude \"**/audit-code-wrapper.test.mjs\" --exclude \"**/audit/next-step.test.mjs\" --exclude \"**/seam-host-only-next-step.test.mjs\" --exclude \"**/*-e2e.test.*\" --exclude \"**/next-step-implement-dispatch.test.ts\" --exclude \"**/next-step-pipeline-dispatch.test.ts\"",
    "verify:hosts": "node scripts/audit/verify-hosts.mjs",
    "verify:release": "npm run verify:checks && vitest run",
    "verify:remediate-hosts": "node scripts/remediate/verify-hosts.mjs"
  },
  "signal_details": {
    "rapid_release": "3 versions in last 24h: ['0.33.10', '0.33.11', '0.33.12']",
    "repo_too_new_for_version_history": "claimed repo created 52d ago but package has 150 versions (expect >= 130d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/OhOkThisIsFine/audit-tools.git' also claimed by 3 package(s) under different publishers: ['npm/remediator-lambda', 'npm/auditor-lambda', 'npm/@audit-tools/shared']"
  },
  "time": {
    "created": "2026-06-19T00:13:48.055Z",
    "modified": "2026-07-20T05:45:25.112Z"
  }
}