BEACON

← candidates

npm snyk-mvn-plugin @4.9.1

score
0.7 high
flagged 2026-07-22 09:14
signals by category
identity 1 topology 1

maintainers added:

package profile →

Signals fired

signalweightrationale
identity
publisher_unrecognized 0.7 latest published by 'CircleCI', not in maintainer set
topology
typosquat 1.0 combosquat of 'snyk'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "snyk-admin"
  ],
  "versions": 134
}

Evidence (package doc at flag time)

{
  "dependencies_count": 9,
  "dist": {
    "integrity": "sha512-ZwIAYpZV8W803rWpQQ10prBoGcR+ng71nan40tHX91DQJWbo3hDQXI4rpuYpFtfJAUGJYRMO/Vfe9YY7Ue54fQ==",
    "tarball": "https://registry.npmjs.org/snyk-mvn-plugin/-/snyk-mvn-plugin-4.9.1.tgz",
    "unpackedSize": 174376
  },
  "dist-tags": {
    "latest": "4.9.1"
  },
  "latest_version": "4.9.1",
  "maintainers": [
    {
      "email": "npmjs+snyk-admin@snyk.io",
      "name": "snyk-admin"
    }
  ],
  "num_versions": 135,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/snyk/snyk-mvn-plugin.git"
  },
  "scripts": {
    "build": "tsc",
    "format": "prettier --write '{lib,tests}/**/*.{js,ts,json,yml}'",
    "format:check": "prettier --check '{lib,test}/**/*.{js,ts,json,yml}'",
    "lint": "npm run format:check && npm run lint:eslint",
    "lint:eslint": "eslint --color --cache 'lib/**/*.{js,ts}'",
    "prepare": "npm run build",
    "semantic-release": "semantic-release",
    "test": "npm run prepare && npm run test:functional && npm run test:system",
    "test:functional": "jest --maxWorkers=2 tests/jest/functional/",
    "test:maven3": "npm run prepare && npm run test:functional && npm run test:system-maven3",
    "test:maven4": "npm run prepare && npm run test:functional && npm run test:system-maven4",
    "test:system": "jest --runInBand --testTimeout=180000 tests/jest/system/",
    "test:system-maven3": "jest --runInBand --testTimeout=180000 tests/jest/system/ --testPathIgnorePatterns=maven4.spec.ts",
    "test:system-maven4": "jest --runInBand --testTimeout=180000 tests/jest/system/"
  },
  "signal_details": {
    "publisher_unrecognized": "latest published by 'CircleCI', not in maintainer set",
    "typosquat": "combosquat of 'snyk'"
  },
  "time": {
    "created": "2017-06-21T10:38:16.806Z",
    "modified": "2026-07-22T14:14:48.884Z"
  }
}