npm @depup/ghost @6.53.0-depup.1
score
0.6776
med
flagged
2026-07-21 19:38
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| mass_publish_burst | 0.8 | publisher 'chiefmikey' pushed 53 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git://github.com/TryGhost/Ghost.git' also claimed by 1 package(s) under different publishers: ['npm/ghost'] |
| dependency_added_unknown | 0.6 | 19 new non-watchlisted dep(s): ['@tryghost/adapter-base-redirects', '@tryghost/adapter-base-route-settings', '@tryghost/adapter-base-scheduling', '@tryghost/adapter-base-sso', '@tryghost/brute-knex'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"chiefmikey"
],
"versions": 40
}
Evidence (package doc at flag time)
{
"dependencies_count": 166,
"dist": {
"integrity": "sha512-KqoyO2crTPjEpW5xD1tSXMcI5Bw1ep8FZW/hGgTxb1T08YuekXYLoWMHpZT4hsCE+JfLF/Nc3o6wfjf1rL3ibg==",
"tarball": "https://registry.npmjs.org/@depup/ghost/-/ghost-6.53.0-depup.1.tgz",
"unpackedSize": 52043239
},
"dist-tags": {
"latest": "6.53.0-depup.1"
},
"latest_version": "6.53.0-depup.1",
"maintainers": [
{
"email": "wolfemikl@gmail.com",
"name": "chiefmikey"
}
],
"num_versions": 42,
"repository": {
"type": "git",
"url": "git://github.com/TryGhost/Ghost.git"
},
"scripts": {},
"signal_details": {
"dependency_added_unknown": "19 new non-watchlisted dep(s): ['@tryghost/adapter-base-redirects', '@tryghost/adapter-base-route-settings', '@tryghost/adapter-base-scheduling', '@tryghost/adapter-base-sso', '@tryghost/brute-knex'] ...",
"mass_publish_burst": "publisher 'chiefmikey' pushed 53 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git://github.com/TryGhost/Ghost.git' also claimed by 1 package(s) under different publishers: ['npm/ghost']"
},
"time": {
"created": "2026-03-17T21:33:19.387Z",
"modified": "2026-07-22T00:38:18.467Z"
}
}