npm @forestadmin/agent @1.87.0

score

0.6667 med

flagged 2026-07-22 09:16

signals by category

topology 3

maintainers added: —

Signals fired

signal	weight	rationale
topology
dist_tag_anomaly	0.5	dist-tags.latest=1.87.0 but max published is 2.0.1
shared_repo_different_publisher	0.9	repo 'git+https://github.com/ForestAdmin/agent-nodejs.git' also claimed by 9 package(s) under different publishers: ['npm/@forestadmin/workflow-executor', 'npm/@forestadmin/agent-bff', 'npm/@forestadmin/mcp-server'] ...
dependency_added_unknown	0.6	1 new non-watchlisted dep(s): ['light-my-request']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "pmerlet",
    "forestbot"
  ],
  "versions": 428
}

Evidence (package doc at flag time)

{
  "dependencies_count": 22,
  "dist": {
    "integrity": "sha512-GK+rNLnUBwSy64P5aZF7HIuind4qcySqHZMlZUWZkD11+LPTTdK53A3uLWFf9Wz7gWoYu/D5H+bvX/R+dW6EbA==",
    "tarball": "https://registry.npmjs.org/@forestadmin/agent/-/agent-1.87.0.tgz",
    "unpackedSize": 622809
  },
  "dist-tags": {
    "alpha": "1.4.0-alpha.3",
    "alpha-webhook-custom-actions": "1.10.0-alpha-webhook-custom-actions.5",
    "alpha-widgets": "1.17.0-alpha-widgets.4",
    "beta": "1.0.0-beta.63",
    "beta-cloud-customizer": "1.37.0-beta-cloud-customizer.1",
    "beta-cloud-toolkit": "1.37.0-beta-cloud-toolkit.1",
    "latest": "1.87.0"
  },
  "latest_version": "1.87.0",
  "maintainers": [
    {
      "email": "pierre.merlet@forestadmin.com",
      "name": "pmerlet"
    },
    {
      "email": "arnaud+github-bot@forestadmin.com",
      "name": "forestbot"
    }
  ],
  "num_versions": 429,
  "repository": {
    "directory": "packages/agent",
    "type": "git",
    "url": "git+https://github.com/ForestAdmin/agent-nodejs.git"
  },
  "scripts": {
    "build": "tsc",
    "build:watch": "tsc --watch",
    "clean": "rm -rf coverage dist",
    "lint": "eslint src test",
    "test": "NODE_OPTIONS=--experimental-vm-modules jest"
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['light-my-request']",
    "dist_tag_anomaly": "dist-tags.latest=1.87.0 but max published is 2.0.1",
    "shared_repo_different_publisher": "repo 'git+https://github.com/ForestAdmin/agent-nodejs.git' also claimed by 9 package(s) under different publishers: ['npm/@forestadmin/workflow-executor', 'npm/@forestadmin/agent-bff', 'npm/@forestadmin/mcp-server'] ..."
  },
  "time": {
    "created": "2022-04-15T08:12:44.397Z",
    "modified": "2026-07-22T14:16:03.620Z"
  }
}