BEACON

← candidates

npm forge-openclaw-plugin @0.3.48

score
0.7333 high
flagged 2026-07-23 02:03
signals by category
topology 2 enrichment 1

maintainers added: —

package profile →

Signals fired

signalweightrationale
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/albertbuchard/forge.git' also claimed by 1 package(s) under different publishers: ['npm/forge-memory']
dependency_added_unknown 0.6 3 new non-watchlisted dep(s): ['@mariozechner/pi-agent-core', '@simplewebauthn/server', 'libsodium-wrappers-sumo']
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 118d ago but package has 129 versions (expect >= 126d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "albertbuchard"
  ],
  "versions": 110
}

Evidence (package doc at flag time)

{
  "dependencies_count": 52,
  "dist": {
    "integrity": "sha512-NvyixsY/szFNt60ku0iwBpswycirkK4lOLP59fOBvwqyM6q4PTPtFq9ynocKUjTe9NfXS721BAh4xP6rg9Z/RA==",
    "tarball": "https://registry.npmjs.org/forge-openclaw-plugin/-/forge-openclaw-plugin-0.3.48.tgz",
    "unpackedSize": 17609321
  },
  "dist-tags": {
    "latest": "0.3.48"
  },
  "latest_version": "0.3.48",
  "maintainers": [
    {
      "email": "albert.buchard@gmail.com",
      "name": "albertbuchard"
    }
  ],
  "num_versions": 129,
  "repository": {
    "directory": "plugins/openclaw",
    "type": "git",
    "url": "git+https://github.com/albertbuchard/forge.git"
  },
  "scripts": {
    "build": "node ./scripts/build.mjs",
    "test:contracts": "node --test ./scripts/conversational-contracts.test.mjs"
  },
  "signal_details": {
    "dependency_added_unknown": "3 new non-watchlisted dep(s): ['@mariozechner/pi-agent-core', '@simplewebauthn/server', 'libsodium-wrappers-sumo']",
    "repo_too_new_for_version_history": "claimed repo created 118d ago but package has 129 versions (expect >= 126d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/albertbuchard/forge.git' also claimed by 1 package(s) under different publishers: ['npm/forge-memory']"
  },
  "time": {
    "created": "2026-03-26T19:41:11.726Z",
    "modified": "2026-07-18T10:50:42.331Z"
  }
}