BEACON

← candidates

npm @github/webauthn-json @2.1.1

score
0.7338 high
flagged 2026-07-21 13:01
signals by category
identity 2 enrichment 1

maintainers added: alaingoga, joycezhu

package profile →

Signals fired

signalweightrationale
identity
maintainer_churn 1.0 added: ['alaingoga', 'joycezhu']
publisher_unrecognized 0.7 latest published by 'lgarron', not in maintainer set
enrichment
repo_archived 0.7 claimed repo github/webauthn-json is archived but package keeps publishing

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "manuelpuyol",
    "jonrohan",
    "primer-css",
    "gracepark",
    "jibrangarcia",
    "arelia",
    "tylerthedev",
    "smockle",
    "simurai",
    "khiga8",
    "dustin.greif",
    "srt32",
    "githubbot",
    "jfuchs",
    "andrialexandrou",
    "bteng22",
    "dustin.savery",
    "ncalteen",
    "andreiig"
  ],
  "versions": 52
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-XrftRn4z75SnaJOmZQbt7Mk+IIjqVHw+glDGOxuHwXkZBZh/MBoRS7MHjSZMDaLhT4RjN2VqiEU7EOYleuJWSQ==",
    "tarball": "https://registry.npmjs.org/@github/webauthn-json/-/webauthn-json-2.1.1.tgz",
    "unpackedSize": 300885
  },
  "dist-tags": {
    "latest": "2.1.1"
  },
  "latest_version": "2.1.1",
  "maintainers": [
    {
      "email": "manuelpuyol@github.com",
      "name": "manuelpuyol"
    },
    {
      "email": "yes@jonrohan.codes",
      "name": "jonrohan"
    },
    {
      "email": "design-systems@github.com",
      "name": "primer-css"
    },
    {
      "email": "lugraciecy@gmail.com",
      "name": "gracepark"
    },
    {
      "email": "jibrang@github.com",
      "name": "jibrangarcia"
    },
    {
      "email": "arelia.jones@gmail.com",
      "name": "arelia"
    },
    {
      "email": "tylerjdev@github.com",
      "name": "tylerthedev"
    },
    {
      "email": "clay@smockle.com",
      "name": "smockle"
    },
    {
      "email": "sim@simurai.com",
      "name": "simurai"
    },
    {
      "email": "katehiga8@gmail.com",
      "name": "khiga8"
    },
    {
      "email": "dustin.greif@gmail.com",
      "name": "dustin.greif"
    },
    {
      "email": "simon.taranto@gmail.com",
      "name": "srt32"
    },
    {
      "email": "dgreif+githubbotnpm@github.com",
      "name": "githubbot"
    },
    {
      "email": "jonathan.fuchs@gmail.com",
      "name": "jfuchs"
    },
    {
      "email": "andri.j.alexandrou@gmail.com",
      "name": "andrialexandrou"
    },
    {
      "email": "joycezhu@github.com",
      "name": "joycezhu"
    },
    {
      "email": "bteng22@gmail.com",
      "name": "bteng22"
    },
    {
      "email": "dustin.savery@gmail.com",
      "name": "dustin.savery"
    },
    {
      "email": "ncalteen@github.com",
      "name": "ncalteen"
    },
    {
      "email": "alaingoga@gmail.com",
      "name": "alaingoga"
    },
    {
      "email": "andrei.girip99@gmail.com",
      "name": "andreiig"
    }
  ],
  "num_versions": 52,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/github/webauthn-json.git"
  },
  "scripts": {
    "build": "npm run build-js && npm run build-types",
    "build-js": "node script/build-js.js",
    "build-pages": "node script/build-pages.js",
    "build-types": "npx tsc -p tsconfig-types.json",
    "clean": "rm -rf ./.temp ./dist",
    "dev": "node script/dev.js",
    "format": "npx rome format --write src",
    "lint": "npx rome check src",
    "prepack": "npm run clean && npm run build",
    "test": "npx jest && npm run lint"
  },
  "signal_details": {
    "maintainer_churn": "added: ['alaingoga', 'joycezhu']",
    "publisher_unrecognized": "latest published by 'lgarron', not in maintainer set",
    "repo_archived": "claimed repo github/webauthn-json is archived but package keeps publishing"
  },
  "time": {
    "created": "2019-08-02T07:12:48.600Z",
    "modified": "2026-07-21T17:59:30.739Z"
  }
}