BEACON

← candidates

npm @boundaryml/baml-bridge @0.15.0

score
0.6607 med
flagged 2026-07-22 19:35
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
dist_tag_anomaly 0.5 dist-tags.latest=0.15.0 but max published is 0.15.1-nightly.20260714.a
shared_repo_different_publisher 0.9 repo 'git+https://github.com/BoundaryML/baml.git' also claimed by 10 package(s) under different publishers: ['npm/@boundaryml/baml-bridge-darwin-arm64', 'npm/@boundaryml/baml-bridge-linux-arm64-musl', 'npm/@boundaryml/baml-bridge-linux-x64-gnu'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "aaronvg",
    "hellovai-boundary",
    "sxlijin"
  ],
  "versions": 64
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-ZkKnDIv+HZ3zxKfpOKjY1kHOtjJQ2QEVtmttkioGqTQcIK5vz/TrZhBLw/WfhRgAE4beMirjpik9YQn0oksxFg==",
    "tarball": "https://registry.npmjs.org/@boundaryml/baml-bridge/-/baml-bridge-0.15.0.tgz",
    "unpackedSize": 1454158
  },
  "dist-tags": {
    "latest": "0.15.0",
    "nightly": "0.15.1-nightly.20260722.f",
    "placeholder": "0.0.0"
  },
  "latest_version": "0.15.0",
  "maintainers": [
    {
      "email": "aaron@gloo.chat",
      "name": "aaronvg"
    },
    {
      "email": "vbv@boundaryml.com",
      "name": "hellovai-boundary"
    },
    {
      "email": "npmjs@sxlijin.com",
      "name": "sxlijin"
    }
  ],
  "num_versions": 65,
  "repository": {
    "directory": "baml_language/sdks/nodejs/bridge_nodejs",
    "type": "git",
    "url": "git+https://github.com/BoundaryML/baml.git"
  },
  "scripts": {
    "attw": "attw --pack --profile esm-only",
    "build:clean": "node typescript_src/clean-dist.js",
    "build:copy-native-dts": "node typescript_src/copy-native-dts.js",
    "build:copy-proto": "node typescript_src/copy-proto.js",
    "build:debug": "pnpm build:clean && pnpm build:proto && pnpm build:napi-debug && pnpm build:copy-native-dts && pnpm build:ts_build && pnpm build:copy-proto && pnpm build:tag-generated-files",
    "build:napi-debug": "napi build --js ./dist/native.js --esm --dts ./dist/native.d.ts --platform",
    "build:napi-release": "napi build --js ./dist/native.js --esm --dts ./dist/native.d.ts --platform --profile release-bridge-node",
    "build:proto": "node node_modules/protobufjs-cli/bin/pbjs -t static-module -w es6 -p ../../../crates/bridge_ctypes/types -o typescript_src/proto/baml_cffi.js ../../../crates/bridge_ctypes/types/baml_bridge/cffi/v1/baml_inbound.proto ../../../crates/bridge_ctypes/types/baml_bridge/cffi/v1/baml_outbound.proto && node node_modules/protobufjs-cli/bin/pbts -o typescript_src/proto/baml_cffi.d.ts typescript_src/proto/baml_cffi.js",
    "build:release": "pnpm build:clean && pnpm build:proto && pnpm build:napi-release && pnpm build:copy-native-dts && pnpm build:ts_build && pnpm build:copy-proto && pnpm build:tag-generated-files",
    "build:tag-generated-files": "node typescript_src/tag-generated-files.js",
    "build:ts_build": "tsc -p tsconfig.json",
    "test": "vitest run"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=0.15.0 but max published is 0.15.1-nightly.20260714.a",
    "shared_repo_different_publisher": "repo 'git+https://github.com/BoundaryML/baml.git' also claimed by 10 package(s) under different publishers: ['npm/@boundaryml/baml-bridge-darwin-arm64', 'npm/@boundaryml/baml-bridge-linux-arm64-musl', 'npm/@boundaryml/baml-bridge-linux-x64-gnu'] ..."
  },
  "time": {
    "created": "2026-07-07T21:07:14.403Z",
    "modified": "2026-07-23T00:07:21.727Z"
  }
}