npm audit-tools @0.34.2
score
0.8
high
flagged
2026-07-20 17:43
Signals fired
| signal | weight | rationale |
|---|---|---|
| cadence | ||
| rapid_release | 0.8 | 5 versions in last 24h: ['0.33.11', '0.33.12', '0.34.0', '0.34.1', '0.34.2'] |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/OhOkThisIsFine/audit-tools.git' also claimed by 3 package(s) under different publishers: ['npm/@audit-tools/shared', 'npm/remediator-lambda', 'npm/auditor-lambda'] |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 53d ago but package has 153 versions (expect >= 131d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"wheatiest"
],
"versions": 151
}
Evidence (package doc at flag time)
{
"dependencies_count": 5,
"dist": {
"integrity": "sha512-jvlAp2ql3cXB3ZR9ikXWsHOcZZR6ZRFjTPvwU9m/KbnFaxni2WjPaxVa04ikrQHYc+SuJrVsuTZH41xF7A1l/A==",
"tarball": "https://registry.npmjs.org/audit-tools/-/audit-tools-0.34.2.tgz",
"unpackedSize": 9872140
},
"dist-tags": {
"latest": "0.34.2"
},
"latest_version": "0.34.2",
"maintainers": [
{
"email": "ethanberlant@gmail.com",
"name": "wheatiest"
}
],
"num_versions": 153,
"repository": {
"type": "git",
"url": "git+https://github.com/OhOkThisIsFine/audit-tools.git"
},
"scripts": {
"build": "tsc -p tsconfig.json && node scripts/shared/copy-data-assets.mjs",
"check": "tsc -p tsconfig.json --noEmit",
"check:deadcode": "knip --no-config-hints",
"check:doc-manifest": "node scripts/check-doc-manifest.mjs",
"fixtures:auditor-contract": "node scripts/remediate/generate-auditor-contract-fixture.mjs",
"generate-schemas": "node scripts/audit/generate-schemas.mjs",
"postinstall": "node scripts/postinstall.mjs",
"prepack": "npm run build",
"prepublishOnly": "npm run verify:release",
"release:major": "node scripts/release-and-publish.mjs major --bump-only",
"release:major:publish": "node scripts/release-and-publish.mjs major",
"release:minor": "node scripts/release-and-publish.mjs minor --bump-only",
"release:minor:publish": "node scripts/release-and-publish.mjs minor",
"release:patch": "node scripts/release-and-publish.mjs patch --bump-only",
"release:patch:publish": "node scripts/release-and-publish.mjs patch",
"smoke:linked-audit-code": "node scripts/audit/smoke-linked-audit-code.mjs",
"smoke:linked-remediate-code": "node scripts/remediate/smoke-linked-remediate-code.mjs",
"smoke:packaged-audit-code": "node scripts/audit/smoke-packaged-audit-code.mjs",
"smoke:packaged-remediate-code": "node scripts/remediate/smoke-packaged-remediate-code.mjs",
"test": "npm run build && vitest run",
"test:doc-contract": "vitest run tests/audit/release-contract.test.mjs tests/audit/file-lock-doc-sync.test.mjs tests/audit/host-asset-renderer-drift.test.mjs",
"test:single": "npm run build && vitest run",
"update-languages": "node scripts/audit/update-languages.mjs",
"update-models": "node scripts/shared/update-models.mjs",
"verify:checks": "node scripts/shared/profile-run.mjs verify-checks check:deadcode check:doc-manifest build verify:hosts verify:remediate-hosts smoke:packaged-audit-code smoke:packaged-remediate-code",
"verify:guards": "vitest run --retry=2 --exclude \"**/audit-code-completion.test.mjs\" --exclude \"**/audit-code-wrapper.test.mjs\" --exclude \"**/audit/next-step.test.mjs\" --exclude \"**/seam-host-only-next-step.test.mjs\" --exclude \"**/*-e2e.test.*\" --exclude \"**/next-step-implement-dispatch.test.ts\" --exclude \"**/next-step-pipeline-dispatch.test.ts\"",
"verify:hosts": "node scripts/audit/verify-hosts.mjs",
"verify:release": "npm run verify:checks && vitest run",
"verify:remediate-hosts": "node scripts/remediate/verify-hosts.mjs"
},
"signal_details": {
"rapid_release": "5 versions in last 24h: ['0.33.11', '0.33.12', '0.34.0', '0.34.1', '0.34.2']",
"repo_too_new_for_version_history": "claimed repo created 53d ago but package has 153 versions (expect >= 131d for that history)",
"shared_repo_different_publisher": "repo 'git+https://github.com/OhOkThisIsFine/audit-tools.git' also claimed by 3 package(s) under different publishers: ['npm/@audit-tools/shared', 'npm/remediator-lambda', 'npm/auditor-lambda']"
},
"time": {
"created": "2026-06-19T00:13:48.055Z",
"modified": "2026-07-20T22:43:03.070Z"
}
}