BEACON

← candidates

npm instar @1.3.898

score
0.7 high
flagged 2026-07-21 14:02
signals by category
cadence 1 topology 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 9 versions in last 24h: ['1.3.894', '1.3.895', '1.3.896', '1.3.897', '1.3.898']
topology
dependency_added_unknown 0.6 1 new non-watchlisted dep(s): ['ssh2']
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 152d ago but package has 1492 versions (expect >= 190d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "jkheadley"
  ],
  "versions": 1490
}

Evidence (package doc at flag time)

{
  "dependencies_count": 22,
  "dist": {
    "integrity": "sha512-mbz/QpN0+u+0KzXGTm+Wydlh3qJ6mGbsxSTDrAW63Fqc3kfvI/vNqP5PLErZINLBuRL2vSKGfGamIjmTaJNtRg==",
    "tarball": "https://registry.npmjs.org/instar/-/instar-1.3.898.tgz",
    "unpackedSize": 64143307
  },
  "dist-tags": {
    "beta": "0.24.18-beta.0",
    "latest": "1.3.898"
  },
  "latest_version": "1.3.898",
  "maintainers": [
    {
      "email": "headley.justin@gmail.com",
      "name": "jkheadley"
    }
  ],
  "num_versions": 1492,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/JKHeadley/instar.git"
  },
  "scripts": {
    "build": "node scripts/generate-builtin-manifest.cjs && tsc && chmod 0755 dist/cli.js && node scripts/sign-instar-lockfile.mjs",
    "check:contract-evidence": "node scripts/check-contract-evidence.js",
    "check:pre-push-gate": "node scripts/pre-push-gate.js",
    "check:release": "node scripts/analyze-release.js",
    "check:upgrade-guide": "node scripts/check-upgrade-guide.js",
    "clean": "rm -rf dist",
    "dev": "tsc --watch",
    "generate:manifest": "node scripts/generate-builtin-manifest.cjs",
    "lint": "tsc --noEmit && node scripts/lint-no-direct-destructive.js && node scripts/lint-no-direct-llm-http.js && node scripts/lint-no-direct-url-log.js && node scripts/lint-no-unfunneled-topic-creation.js && node scripts/lint-no-unfunneled-headless-launch.js && node scripts/lint-no-unbounded-llm-spawn.js && node scripts/lint-no-unregistered-self-action.js && node scripts/lint-no-unfunneled-credential-write.js && node scripts/lint-state-registry.js && node scripts/lint-store-retention-declared.js && node scripts/lint-no-wholefile-sync-read.js && node scripts/lint-cas-emit-placement.js && node scripts/lint-journal-actuation-ban.js && node scripts/lint-no-blocking-process-scans.js && node scripts/lint-sync-subprocess-chokepoint.js && node scripts/lint-dev-agent-dark-gate.js && node scripts/lint-guard-manifest.js && node scripts/lint-llm-attribution.js && node scripts/lint-no-mainthread-cartographer-walk.js && node scripts/lint-scrape-fixture-realness.js && node scripts/check-codex-rule1-drift.js && node scripts/lint-routing-registry-freshness.js && node scripts/lint-no-opus-claude-cli-gating.js && node scripts/lint-model-registry-freshness.mjs && node scripts/lint-no-unreachable-messaging-gate.js && node scripts/lint-nature-chains.mjs && node scripts/lint-emit-without-admit.js && node scripts/lint-migration-consumer-completeness.js && node scripts/lint-canonical-pipeline-completeness.mjs && node scripts/lint-expected-capacity-degradations.js",
    "lint:canonical-pipeline-completeness": "node scripts/lint-canonical-pipeline-completeness.mjs",
    "lint:credential-write": "node scripts/lint-no-unfunneled-credential-write.js",
    "lint:credential-write:staged": "node scripts/lint-no-unfunneled-credential-write.js --staged",
    "lint:destructive": "node scripts/lint-no-direct-destructive.js",
    "lint:destructive:staged": "node scripts/lint-no-direct-destructive.js --staged",
    "lint:dev-agent-dark-gate": "node scripts/lint-dev-agent-dark-gate.js",
    "lint:dev-agent-dark-gate:staged": "node scripts/lint-dev-agent-dark-gate.js --staged",
    "lint:guard-manifest": "node scripts/lint-guard-manifest.js",
    "lint:llm-attribution": "node scripts/lint-llm-attribution.js",
    "lint:llm-attribution:staged": "node scripts/lint-llm-attribution.js --staged",
    "lint:llm-http": "node scripts/lint-no-direct-llm-http.js",
    "lint:llm-http:staged": "node scripts/lint-no-direct-llm-http.js --staged",
    "lint:model-freshness": "node scripts/lint-model-registry-freshness.mjs",
    "lint:model-freshness:strict": "INSTAR_MODEL_FRESHNESS_STRICT=1 node scripts/lint-model-registry-freshness.mjs",
    "lint:nature-chains": "node scripts/lint-nature-chains.mjs",
    "lint:no-opus-claude-cli-gating": "node scripts/lint-no-opus-claude-cli-gating.js",
    "lint:no-unbounded-llm-spawn": "node scripts/lint-no-unbounded-llm-spawn.js",
    "lint:no-unbounded-llm-spawn:staged": "node scripts/lint-no-unbounded-llm-spawn.js --staged",
    "lint:routing-registry": "node scripts/lint-routing-registry-freshness.js",
    "lint:scrape-realness": "node scripts/lint-scrape-fixture-realness.js",
    "lint:scrape-realness:staged": "node scripts/lint-scrape-fixture-realness.js --staged",
    "postinstall": "node scripts/fix-better-sqlite3.cjs",
    "prepare": "husky",
    "prepublishOnly": "npm run build && npm run check:upgrade-guide && npm run check:contract-evidence",
    "test": "vitest run",
    "test:all": "vitest run && vitest run --config vitest.integration.config.ts && vitest run --config vitest.e2e.config.ts",
    "test:canonical-pipeline-runtime": "vitest run --config vitest.e2e.config.ts tests/e2e/feedback-factory-drain-lifecycle.test.ts && vitest run tests/unit/canonical-pipeline-completeness-lint.test.ts tests/unit/canonical-pipeline-runtime-evidence.test.ts",
    "test:contract": "node scripts/run-contract-tests.js",
    "test:contract:raw": "vitest run --config vitest.contract.config.ts",
    "test:e2e": "vitest run --config vitest.e2e.config.ts",
    "test:feedback-drain-performance": "vitest run tests/integration/feedback-drain-performance.test.ts",
    "test:flaky": "vitest run tests/unit/relationship-routes.test.ts tests/integration/messaging-routes.test.ts tests/integration/whatsapp-routes.test.ts tests/unit/server.test.ts tests/e2e/semantic-memory-lifecycle.test.ts tests/e2e/system-reviewer-e2e.test.ts tests/e2e/working-memory-lifecycle.test.ts tests/e2e/messaging-multi-agent.test.ts",
    "test:integration": "vitest run --config vitest.integration.config.ts",
    "test:push": "vitest run --config vitest.push.config.ts",
    "test:smoke": "node scripts/pre-push-smoke.mjs",
    "test:watch": "vitest"
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['ssh2']",
    "rapid_release": "9 versions in last 24h: ['1.3.894', '1.3.895', '1.3.896', '1.3.897', '1.3.898']",
    "repo_too_new_for_version_history": "claimed repo created 152d ago but package has 1492 versions (expect >= 190d for that history)"
  },
  "time": {
    "created": "2026-02-19T03:48:05.767Z",
    "modified": "2026-07-21T19:01:54.391Z"
  }
}