BEACON

← candidates

npm run402-mcp @4.10.2

score
0.7667 high
flagged 2026-07-22 13:05
signals by category
topology 2 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
typosquat 1.0 combosquat of 'run402'
shared_repo_different_publisher 0.9 repo 'git+https://github.com/kychee-com/run402.git' also claimed by 3 package(s) under different publishers: ['npm/run402', 'npm/@run402/astro', 'npm/@run402/sdk']
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 139d ago but package has 263 versions (expect >= 145d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "kychee"
  ],
  "versions": 263
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-iXGuLkGibQdS23L54QdK5sG95QkJdfjS+kyLChw3i6Gdzg8g5rejvIr+tuNt0iDbKL5Pl5PNW6GiTk5WSeb85A==",
    "tarball": "https://registry.npmjs.org/run402-mcp/-/run402-mcp-4.10.2.tgz",
    "unpackedSize": 4019183
  },
  "dist-tags": {
    "latest": "4.10.2"
  },
  "latest_version": "4.10.2",
  "maintainers": [
    {
      "email": "tal@kychee.com",
      "name": "kychee"
    }
  ],
  "num_versions": 263,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/kychee-com/run402.git"
  },
  "scripts": {
    "build": "rm -rf dist cli/core-dist cli/sdk/dist cli/sdk/core-dist && npm run build:core && npm run build:sdk && tsc && mkdir -p cli/core-dist cli/sdk/dist cli/sdk/core-dist && cp core/dist/*.js cli/core-dist/ && cp -R sdk/dist/. cli/sdk/dist/ && cp sdk/core-dist/*.js cli/sdk/core-dist/",
    "build:core": "rm -rf core/dist && tsc -p core/tsconfig.json",
    "build:sdk": "rm -rf sdk/dist sdk/core-dist && mkdir -p sdk/core-dist && cp core/dist/*.js sdk/core-dist/ && cp core/dist/*.d.ts sdk/core-dist/ && tsc -p sdk/tsconfig.json",
    "start": "node dist/index.js",
    "test": "npm run build && node --experimental-test-module-mocks --test --import tsx SKILL.test.ts sync.test.ts examples/tenant-x402-wallet-stats/example.test.mjs 'core/src/**/*.test.ts' 'sdk/src/**/*.test.ts' 'src/**/*.test.ts' && node --test cli-core-target.test.mjs && node --experimental-test-module-mocks --test cli-up-argv.test.mjs && node --test cli-output-contract.test.mjs cli-e2e.test.mjs cli-help.test.mjs cli-provision-active.test.mjs cli-typed-config-modes.test.mjs cli-argv.test.mjs cli-conventions-gate.test.mjs cli-suggestions-gate.test.mjs cli-env.test.mjs cli-wallets.test.mjs cli-org.test.mjs cli-ci.test.mjs cli-deploy-ci.test.mjs cli-operator-loopback.test.mjs cli/lib/doctor-source-scan.test.mjs cli/lib/errors.test.mjs cli/lib/pay.test.mjs cli-bootstrap-next-actions.test.mjs && npm run test:docs",
    "test:docs": "node scripts/check-typed-config-docs.mjs && npm run check:docs --workspace=@run402/sdk -- --skip-build",
    "test:e2e": "npm run build && node --test cli-core-target.test.mjs && node --test cli-output-contract.test.mjs cli-e2e.test.mjs cli-help.test.mjs cli-provision-active.test.mjs cli-typed-config-modes.test.mjs cli-argv.test.mjs cli-conventions-gate.test.mjs cli-suggestions-gate.test.mjs cli-env.test.mjs cli-wallets.test.mjs cli-org.test.mjs cli-ci.test.mjs cli-deploy-ci.test.mjs cli-operator-loopback.test.mjs cli/lib/doctor-source-scan.test.mjs cli/lib/errors.test.mjs cli-bootstrap-next-actions.test.mjs",
    "test:help": "npm run build && node --test cli-help.test.mjs",
    "test:integration": "node --test --import tsx core/src/siwx-integration.integ.ts",
    "test:integration:full": "node --test --import tsx cli-integration.test.ts",
    "test:integration:fullstack": "npm run build && node --test --import tsx fullstack-integration.test.ts",
    "test:integration:mcp": "node --test --import tsx mcp-integration.test.ts",
    "test:run402-app-schema-drift": "node scripts/check-run402-app-schema-drift.mjs",
    "test:skill": "node --test --import tsx SKILL.test.ts",
    "test:sync": "node --test --import tsx sync.test.ts examples/tenant-x402-wallet-stats/example.test.mjs"
  },
  "signal_details": {
    "repo_too_new_for_version_history": "claimed repo created 139d ago but package has 263 versions (expect >= 145d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/kychee-com/run402.git' also claimed by 3 package(s) under different publishers: ['npm/run402', 'npm/@run402/astro', 'npm/@run402/sdk']",
    "typosquat": "combosquat of 'run402'"
  },
  "time": {
    "created": "2026-03-05T12:03:13.954Z",
    "modified": "2026-07-22T10:46:02.995Z"
  }
}