BEACON

← candidates

npm adhdev @1.0.17

score
0.5732 med
flagged 2026-07-21 19:47
signals by category
content 1 topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
content
install_script_payload 1.0 install/lifecycle script matches payload regex
topology
dist_tag_anomaly 0.5 dist-tags.latest=1.0.17 but max published is 1.0.18-rc.1
mass_publish_burst 0.8 publisher 'vilmire' pushed 5 packages in the last 15min on npm

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "vilmire"
  ],
  "versions": 1102
}

Evidence (package doc at flag time)

{
  "dependencies_count": 16,
  "dist": {
    "integrity": "sha512-p659p9nW1BjBpR+uBB/XetRIGhanRQUs/OfvQSRnTTHNah8f6IBJ2fcl0bwK1M040bAdMa9R2rcni8uky11OWQ==",
    "tarball": "https://registry.npmjs.org/adhdev/-/adhdev-1.0.17.tgz",
    "unpackedSize": 61028806
  },
  "dist-tags": {
    "latest": "1.0.17",
    "next": "1.0.18-rc.5"
  },
  "latest_version": "1.0.17",
  "maintainers": [
    {
      "email": "vilmire@gmail.com",
      "name": "vilmire"
    }
  ],
  "num_versions": 1102,
  "repository": {
    "directory": "packages/daemon-cloud",
    "type": "git",
    "url": "git+https://github.com/vilmire/adhdev-cloud.git"
  },
  "scripts": {
    "build": "tsup",
    "bundle:vendor": "node ./scripts/vendor-runtime-deps.mjs",
    "dev": "tsx src/cli/index.ts",
    "preinstall": "node -e \"const major=Number.parseInt(process.versions.node.split('.')[0],10); if (process.platform === 'win32' && major >= 24 && !process.env.ADHDEV_BOOTSTRAP && !process.env.CI) { console.error('\\n\u2717 ADHDev does not currently support Node.js 24+ on Windows.\\n  Install Node.js 22.x on Windows, then retry.\\n'); process.exit(1); }\"",
    "prepublishOnly": "npm run build && npm run bundle:vendor",
    "start": "node dist/cli/index.js",
    "test": "node --import tsx --test test/*.test.ts",
    "typecheck": "tsc --noEmit -p tsconfig.json",
    "validate:pack": "node ./scripts/validate-npm-pack.mjs"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=1.0.17 but max published is 1.0.18-rc.1",
    "install_script_payload": "install/lifecycle script matches payload regex",
    "mass_publish_burst": "publisher 'vilmire' pushed 5 packages in the last 15min on npm"
  },
  "time": {
    "created": "2026-03-03T17:43:34.800Z",
    "modified": "2026-07-22T00:36:16.584Z"
  }
}