BEACON

← candidates

npm @or-sdk/auth @0.37.0

score
0.5333 med
flagged 2026-07-22 10:02
signals by category
topology 3

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
no_repo 0.3 package.json has no repository field
dist_tag_anomaly 0.5 dist-tags.latest=0.37.0 but max published is 1.0.1-beta.1029.0
mass_publish_burst 0.8 publisher 'onereach.user' pushed 5 packages in the last 15min on npm

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "onereach.admin",
    "onereach.user"
  ],
  "versions": 415
}

Evidence (package doc at flag time)

{
  "dependencies_count": 7,
  "dist": {
    "integrity": "sha512-w8YC+KIdkI+c1T5+MvZm2Mf8cbw62b3lP0AQhAwO6wCXDJi/J1geo5cOT95sXmxnwrRAPQcxOx/b4dXpcMO7qQ==",
    "tarball": "https://registry.npmjs.org/@or-sdk/auth/-/auth-0.37.0.tgz",
    "unpackedSize": 200330
  },
  "dist-tags": {
    "beta": "0.37.1-beta.24.0",
    "latest": "0.37.0"
  },
  "latest_version": "0.37.0",
  "maintainers": [
    {
      "email": "admin.npm@onereach.com",
      "name": "onereach.admin"
    },
    {
      "email": "admin.npm+user@onereach.com",
      "name": "onereach.user"
    }
  ],
  "num_versions": 416,
  "repository": null,
  "scripts": {
    "build": "pnpm clean && concurrently 'pnpm:build:*(!watch)'",
    "build:cjs": "tsc --project tsconfig.json",
    "build:esm": "tsc --project tsconfig.esm.json",
    "build:types": "tsc --project tsconfig.types.json",
    "build:watch": "concurrently 'pnpm:build:watch:*'",
    "build:watch:cjs": "tsc --project tsconfig.json -w",
    "build:watch:esm": "tsc --project tsconfig.esm.json -w",
    "build:watch:types": "tsc --project tsconfig.types.json -w",
    "clean": "rm -rf ./dist",
    "dev": "pnpm build:watch:esm",
    "test": "vitest"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=0.37.0 but max published is 1.0.1-beta.1029.0",
    "mass_publish_burst": "publisher 'onereach.user' pushed 5 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field"
  },
  "time": {
    "created": "2022-03-28T09:02:47.306Z",
    "modified": "2026-07-22T15:02:55.207Z"
  }
}