BEACON

← candidates

npm @onereach/billing-dto @25.0.1

score
0.6 med
flagged 2026-07-23 04:30
signals by category
cadence 1 topology 3

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 5 versions in last 24h: ['24.1.2', '24.2.0', '24.2.1', '25.0.0', '25.0.1']
topology
no_repo 0.3 package.json has no repository field
dist_tag_anomaly 0.5 dist-tags.latest=25.0.1 but max published is 25.0.2-beta.7660.0
mass_publish_burst 0.8 publisher 'onereach.user' pushed 5 packages in the last 15min on npm

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "onereach.admin",
    "onereach.user"
  ],
  "versions": 1535
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-XdRpjOVDJQB43WWGzlCLSsnsvttAqjLzuhMKG3qbhb8T0qnzmG/dnC5coyU6SYDlRbN/E69qjBk7B+tOMh4IpA==",
    "tarball": "https://registry.npmjs.org/@onereach/billing-dto/-/billing-dto-25.0.1.tgz",
    "unpackedSize": 167083
  },
  "dist-tags": {
    "beta": "25.0.2-beta.7666.0",
    "latest": "25.0.1"
  },
  "latest_version": "25.0.1",
  "maintainers": [
    {
      "email": "admin.npm@onereach.com",
      "name": "onereach.admin"
    },
    {
      "email": "admin.npm+user@onereach.com",
      "name": "onereach.user"
    }
  ],
  "num_versions": 1536,
  "repository": null,
  "scripts": {
    "build": "pnpm clean && pnpm generate && pnpm build:esm && pnpm build:cjs",
    "build:cjs": "tsc --project tsconfig.build.json",
    "build:esm": "tsc --project tsconfig.esm.json",
    "build:watch:cjs": "tsc --project tsconfig.json -w",
    "build:watch:esm": "tsc --project tsconfig.esm.json -w",
    "clean": "rm -rf ./dist",
    "dev": "pnpm build:watch:esm",
    "generate": "ts-node -T scripts/generate-dto.ts"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=25.0.1 but max published is 25.0.2-beta.7660.0",
    "mass_publish_burst": "publisher 'onereach.user' pushed 5 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field",
    "rapid_release": "5 versions in last 24h: ['24.1.2', '24.2.0', '24.2.1', '25.0.0', '25.0.1']"
  },
  "time": {
    "created": "2025-10-13T13:10:00.697Z",
    "modified": "2026-07-23T09:30:06.129Z"
  }
}