BEACON

← candidates

npm endform-darwin-arm64 @0.73.0

score
0.5 med
flagged 2026-07-21 04:32
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
no_repo 0.3 package.json has no repository field
typosquat 1.0 combosquat of 'endform'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "ostenbom"
  ],
  "versions": 216
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-a1jHWwRmErn4G96OBt7DjweZQs+A1ITgeHvamYXItfkBGTNbW/VFKwpcZi/0IYbdXvLKu4s0ctEck96DleKDTQ==",
    "tarball": "https://registry.npmjs.org/endform-darwin-arm64/-/endform-darwin-arm64-0.73.0.tgz",
    "unpackedSize": 15630899
  },
  "dist-tags": {
    "beta": "0.49.0-beta.1",
    "latest": "0.73.0",
    "next": "0.46.1-beta.1"
  },
  "latest_version": "0.73.0",
  "maintainers": [
    {
      "email": "oliver@endform.dev",
      "name": "ostenbom"
    }
  ],
  "num_versions": 221,
  "repository": null,
  "scripts": null,
  "signal_details": {
    "no_repo": "package.json has no repository field",
    "typosquat": "combosquat of 'endform'"
  },
  "time": {
    "created": "2025-02-05T16:26:01.045Z",
    "modified": "2026-07-21T09:32:47.141Z"
  }
}