BEACON

← candidates

npm skillerr @1.6.0

score
0.5059 med
flagged 2026-07-20 22:19
signals by category
content 1 topology 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
content
license_changed 0.4 'MIT' -> 'Apache-2.0'
topology
typosquat 1.0 combosquat of 'skill'
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 8d ago but package has 30 versions (expect >= 88d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "csinye"
  ],
  "versions": 29
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-QgUh9spS4TxPEp5hbILZwllWxqIeUxM6E0mJYdqm9Z6a/QWclVYvzMHZRvMaYU50o3fQlLIwr72knYxOkmYTEQ==",
    "tarball": "https://registry.npmjs.org/skillerr/-/skillerr-1.6.0.tgz",
    "unpackedSize": 36941
  },
  "dist-tags": {
    "latest": "1.6.0"
  },
  "latest_version": "1.6.0",
  "maintainers": [
    {
      "email": "bharat.dudeja13@gmail.com",
      "name": "csinye"
    }
  ],
  "num_versions": 30,
  "repository": {
    "directory": "packages/skillerr",
    "type": "git",
    "url": "git+https://github.com/dot-skill/skillerr.git"
  },
  "scripts": {
    "prepack": "node ../../scripts/sync-npm-readme.mjs && node -e \"require('fs').accessSync('bin/skill.js')\""
  },
  "signal_details": {
    "license_changed": "'MIT' -> 'Apache-2.0'",
    "repo_too_new_for_version_history": "claimed repo created 8d ago but package has 30 versions (expect >= 88d for that history)",
    "typosquat": "combosquat of 'skill'"
  },
  "time": {
    "created": "2026-07-13T00:49:58.464Z",
    "modified": "2026-07-21T02:49:44.933Z"
  }
}