BEACON

← candidates

npm @cat-factory/sandbox @0.9.122

score
0.8 high
flagged 2026-07-20 18:27
signals by category
cadence 1 topology 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 11 versions in last 24h: ['0.9.117', '0.9.118', '0.9.120', '0.9.121', '0.9.122']
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/kibertoad/cat-factory.git' also claimed by 10 package(s) under different publishers: ['npm/@cat-factory/worker', 'npm/@cat-factory/app', 'npm/@cat-factory/provider-s3'] ...
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 38d ago but package has 256 versions (expect >= 144d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "kibertoad"
  ],
  "versions": 255
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-gUbkaBOBmP0sjuw/pw+t4flHi3fpZmouYDHtC9gpSXkzc8AMjB7RtvWiLiCbqAfPPQjqiCteK/N45XbaJyzhjQ==",
    "tarball": "https://registry.npmjs.org/@cat-factory/sandbox/-/sandbox-0.9.122.tgz",
    "unpackedSize": 51291
  },
  "dist-tags": {
    "latest": "0.9.122"
  },
  "latest_version": "0.9.122",
  "maintainers": [
    {
      "email": "iselwin@gmail.com",
      "name": "kibertoad"
    }
  ],
  "num_versions": 256,
  "repository": {
    "directory": "backend/packages/sandbox",
    "type": "git",
    "url": "git+https://github.com/kibertoad/cat-factory.git"
  },
  "scripts": {
    "build": "tsc -b tsconfig.build.json",
    "test": "vitest run",
    "test:run": "vitest run",
    "typecheck": "tsc -p tsconfig.json --noEmit"
  },
  "signal_details": {
    "rapid_release": "11 versions in last 24h: ['0.9.117', '0.9.118', '0.9.120', '0.9.121', '0.9.122']",
    "repo_too_new_for_version_history": "claimed repo created 38d ago but package has 256 versions (expect >= 144d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/kibertoad/cat-factory.git' also claimed by 10 package(s) under different publishers: ['npm/@cat-factory/worker', 'npm/@cat-factory/app', 'npm/@cat-factory/provider-s3'] ..."
  },
  "time": {
    "created": "2026-06-24T15:22:28.494Z",
    "modified": "2026-07-20T22:37:19.896Z"
  }
}