BEACON

← candidates

npm @vellira-ui/core @2.38.0

score
0.6635 med
flagged 2026-07-20 15:48
signals by category
cadence 1 topology 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 5 versions in last 24h: ['2.35.0', '2.35.1', '2.36.0', '2.37.0', '2.38.0']
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/vellira-dev/vellira.git' also claimed by 5 package(s) under different publishers: ['npm/@vellira-ui/tokens', 'npm/@vellira-ui/types', 'npm/@vellira-ui/icons'] ...
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 67d ago but package has 27 versions (expect >= 85d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "romanbakurov"
  ],
  "versions": 26
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-Sdj+55UGIiD08g670Qat5moU4IUrwThA7lyvtYABHMq0t2v4iVbFICF4c+Eh2iJe5foiQQmDBEqbmXakALY3YQ==",
    "tarball": "https://registry.npmjs.org/@vellira-ui/core/-/core-2.38.0.tgz",
    "unpackedSize": 11781
  },
  "dist-tags": {
    "latest": "2.38.0"
  },
  "latest_version": "2.38.0",
  "maintainers": [
    {
      "email": "ronbakurov@gmail.com",
      "name": "romanbakurov"
    }
  ],
  "num_versions": 27,
  "repository": {
    "directory": "packages/core",
    "type": "git",
    "url": "git+https://github.com/vellira-dev/vellira.git"
  },
  "scripts": {
    "build": "pnpm run clean && tsc -p tsconfig.build.json",
    "clean": "node --input-type=module -e \"import fs from 'node:fs'; fs.rmSync('dist', { recursive: true, force: true })\"",
    "typecheck": "tsc -p tsconfig.json --noEmit"
  },
  "signal_details": {
    "rapid_release": "5 versions in last 24h: ['2.35.0', '2.35.1', '2.36.0', '2.37.0', '2.38.0']",
    "repo_too_new_for_version_history": "claimed repo created 67d ago but package has 27 versions (expect >= 85d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/vellira-dev/vellira.git' also claimed by 5 package(s) under different publishers: ['npm/@vellira-ui/tokens', 'npm/@vellira-ui/types', 'npm/@vellira-ui/icons'] ..."
  },
  "time": {
    "created": "2026-07-04T18:32:54.174Z",
    "modified": "2026-07-20T19:51:33.472Z"
  }
}