BEACON

← candidates

npm @theholocron/cli @2.0.0

score
0.6118 med
flagged 2026-07-22 01:21
signals by category
content 1 topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
content
license_changed 0.4 'GPL-3.0' -> 'MIT'
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/theholocron/holocron.git' also claimed by 8 package(s) under different publishers: ['npm/@theholocron/holocron-plugin-1password', 'npm/@theholocron/holocron-plugin-clerk', 'npm/@theholocron/holocron-plugin-infisical'] ...
dependency_added_unknown 0.6 4 new non-watchlisted dep(s): ['@napi-rs/keyring', '@theholocron/github-client', '@theholocron/http-client', 'tsx']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "thenewton"
  ],
  "versions": 76
}

Evidence (package doc at flag time)

{
  "dependencies_count": 7,
  "dist": {
    "integrity": "sha512-+Mq5VquVa0S1zsVxQSz0d7hj/iYQKQNBdmj4OvpXcY+K/vBbC/G9vT1q9CUVcjRt/6GzSvpPUVBr1d0gRUYrmw==",
    "tarball": "https://registry.npmjs.org/@theholocron/cli/-/cli-2.0.0.tgz",
    "unpackedSize": 254449
  },
  "dist-tags": {
    "alpha": "2.0.0-alpha.77",
    "latest": "2.0.0"
  },
  "latest_version": "2.0.0",
  "maintainers": [
    {
      "email": "npmjs@nwtn.email",
      "name": "thenewton"
    }
  ],
  "num_versions": 78,
  "repository": {
    "directory": "packages/cli",
    "type": "git",
    "url": "git+https://github.com/theholocron/holocron.git"
  },
  "scripts": {
    "build": "tsdown --config-loader tsx",
    "lint": "eslint .",
    "start": "tsx ./src/cli.ts",
    "test": "vitest run",
    "test:coverage": "vitest run --coverage",
    "test:watch": "vitest",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "dependency_added_unknown": "4 new non-watchlisted dep(s): ['@napi-rs/keyring', '@theholocron/github-client', '@theholocron/http-client', 'tsx']",
    "license_changed": "'GPL-3.0' -> 'MIT'",
    "shared_repo_different_publisher": "repo 'git+https://github.com/theholocron/holocron.git' also claimed by 8 package(s) under different publishers: ['npm/@theholocron/holocron-plugin-1password', 'npm/@theholocron/holocron-plugin-clerk', 'npm/@theholocron/holocron-plugin-infisical'] ..."
  },
  "time": {
    "created": "2024-10-31T23:02:43.674Z",
    "modified": "2026-07-22T06:21:00.178Z"
  }
}