npm @devstroupe/devkit-mcp @1.1.16
score
0.548
med
flagged
2026-07-21 18:52
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=1.1.16 but max published is 1.3.0-beta.12 |
| mass_publish_burst | 0.8 | publisher 'devstroupe' pushed 5 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"devstroupe"
],
"versions": 29
}
Evidence (package doc at flag time)
{
"dependencies_count": 2,
"dist": {
"integrity": "sha512-99TSTrnvMlrCsKE8oYR+sOyHSg0Dp8ZY6e1f8atd1/BF3EkLdHWOu6PT6HCBEEV0JTOkJQbDV434z3qodnM7/Q==",
"tarball": "https://registry.npmjs.org/@devstroupe/devkit-mcp/-/devkit-mcp-1.1.16.tgz",
"unpackedSize": 28618
},
"dist-tags": {
"beta": "1.3.0-beta.13",
"latest": "1.1.16"
},
"latest_version": "1.1.16",
"maintainers": [
{
"email": "vitor@devstroupe.com",
"name": "devstroupe"
}
],
"num_versions": 29,
"repository": {
"directory": "packages/devkit-mcp",
"type": "git",
"url": "git+https://github.com/devstroupe/devkit.git"
},
"scripts": {
"build": "tsc && chmod +x dist/index.js",
"test": "tsc && node --test dist/integration.test.js"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=1.1.16 but max published is 1.3.0-beta.12",
"mass_publish_burst": "publisher 'devstroupe' pushed 5 packages in the last 15min on npm"
},
"time": {
"created": "2026-07-11T13:32:05.466Z",
"modified": "2026-07-21T23:50:34.406Z"
}
}