BEACON

← candidates

npm @malloydata/malloyyo @0.2.19

score
0.5747 med
flagged 2026-07-21 14:29
signals by category
topology 2 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/malloydata/malloyyo.git' also claimed by 1 package(s) under different publishers: ['npm/malloyyo']
dependency_added_unknown 0.6 4 new non-watchlisted dep(s): ['@malloydata/render', 'esbuild', 'vega', 'vega-interpreter']
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 62d ago but package has 20 versions (expect >= 78d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "malloy-lang-user",
    "gmaden",
    "scullin",
    "mtoy"
  ],
  "versions": 18
}

Evidence (package doc at flag time)

{
  "dependencies_count": 12,
  "dist": {
    "integrity": "sha512-Vk8zV6VeWYh3jRWaR8Rhn1yYFuDP1mgEh8jZmXbD98+PMBYSw4iNryP6Ga3UWZdwLOgifxJyryRHe9VSmNTGMQ==",
    "tarball": "https://registry.npmjs.org/@malloydata/malloyyo/-/malloyyo-0.2.19.tgz",
    "unpackedSize": 320834
  },
  "dist-tags": {
    "latest": "0.2.19"
  },
  "latest_version": "0.2.19",
  "maintainers": [
    {
      "email": "bporterfield@google.com",
      "name": "malloy-lang-user"
    },
    {
      "email": "maden@google.com",
      "name": "gmaden"
    },
    {
      "email": "scullin@scullinsteel.com",
      "name": "scullin"
    },
    {
      "email": "mtoy@malloydata.org",
      "name": "mtoy"
    }
  ],
  "num_versions": 20,
  "repository": {
    "directory": "packages/cli",
    "type": "git",
    "url": "git+https://github.com/malloydata/malloyyo.git"
  },
  "scripts": {
    "build": "npm run build:engine && esbuild src/index.ts --bundle --platform=node --format=esm --external:commander --external:esbuild --external:@malloydata/* --external:@modelcontextprotocol/* --outfile=dist/index.js && node scripts/copy-frame-src.mjs",
    "build:engine": "cd ../mcp-engine && npm run build",
    "dev": "tsx src/index.ts",
    "prepublishOnly": "npm run build",
    "pretest": "npm run build",
    "release": "tsx scripts/release.ts",
    "test": "tsx --test test/*.test.ts",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "dependency_added_unknown": "4 new non-watchlisted dep(s): ['@malloydata/render', 'esbuild', 'vega', 'vega-interpreter']",
    "repo_too_new_for_version_history": "claimed repo created 62d ago but package has 20 versions (expect >= 78d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/malloydata/malloyyo.git' also claimed by 1 package(s) under different publishers: ['npm/malloyyo']"
  },
  "time": {
    "created": "2026-06-22T20:41:34.515Z",
    "modified": "2026-07-21T19:29:29.181Z"
  }
}