BEACON

← candidates

npm snyk-go-plugin @2.2.1

score
0.6883 med
flagged 2026-07-22 07:31
signals by category
identity 1 topology 1

maintainers added:

package profile →

Signals fired

signalweightrationale
identity
publisher_unrecognized 0.7 latest published by 'CircleCI', not in maintainer set
topology
typosquat 1.0 combosquat of 'snyk'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "snyk-admin"
  ],
  "versions": 87
}

Evidence (package doc at flag time)

{
  "dependencies_count": 8,
  "dist": {
    "integrity": "sha512-cP7gNOSYlvhnl80mUvwdmTM3W0mh+a7T1a0w+gImH3JoE9eLWj9klRxL3K1jDkwrWXgkDxbhrmebe7lgG0J0Wg==",
    "tarball": "https://registry.npmjs.org/snyk-go-plugin/-/snyk-go-plugin-2.2.1.tgz",
    "unpackedSize": 97960
  },
  "dist-tags": {
    "latest": "2.2.1"
  },
  "latest_version": "2.2.1",
  "maintainers": [
    {
      "email": "npmjs+snyk-admin@snyk.io",
      "name": "snyk-admin"
    }
  ],
  "num_versions": 88,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/snyk/snyk-go-plugin.git"
  },
  "scripts": {
    "build": "tsc",
    "build-watch": "tsc -w",
    "format": "prettier --write '{lib,test}/**/*.{js,ts,json}'",
    "lint": "eslint --color --cache '{lib,test}/**/*.{js,ts}' && prettier --check '{lib,test}/**/*.{js,ts}'",
    "prepare": "npm run build",
    "test": "npm run test-functional && npm run test-system",
    "test-functional": "tap --allow-incomplete-coverage ./test/*.test.ts",
    "test-functional-windows": "tap --timeout=300 --allow-incomplete-coverage ./test/*.test.ts -g \"^(?!.*symlink)\"",
    "test-system": "tap --timeout=300 --allow-incomplete-coverage --allow-empty-coverage ./test/system/*.test.ts",
    "test-system-windows": "tap --timeout=300 --allow-incomplete-coverage --allow-empty-coverage ./test/system/*.test.ts",
    "test-windows": "npm run test-functional-windows && npm run test-system-windows",
    "watch": "nodemon -e 'js go'  -x 'npm run test-functional'"
  },
  "signal_details": {
    "publisher_unrecognized": "latest published by 'CircleCI', not in maintainer set",
    "typosquat": "combosquat of 'snyk'"
  },
  "time": {
    "created": "2017-08-07T10:23:16.531Z",
    "modified": "2026-07-22T12:31:30.997Z"
  }
}