BEACON

← candidates

npm @bota-apps/react-components @0.17.0

score
0.7144 high
flagged 2026-07-23 06:18
signals by category
cadence 1 topology 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 6 versions in last 24h: ['0.14.1', '0.15.0', '0.16.0', '0.16.1', '0.17.0']
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/bota-apps/packages.git' also claimed by 10 package(s) under different publishers: ['npm/@bota-apps/auth-client', 'npm/@bota-apps/fm', 'npm/@bota-apps/gql-codegen'] ...
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 17d ago but package has 44 versions (expect >= 98d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "bota-apps"
  ],
  "versions": 43
}

Evidence (package doc at flag time)

{
  "dependencies_count": 10,
  "dist": {
    "integrity": "sha512-0qOM4inPbxQnAyL43s5PWeyr7h7PLQvYySYALoPa0JaFh16ovovgf3A7aMBTcZVZNHoxeOR0egn3rg2AKcs/5g==",
    "tarball": "https://registry.npmjs.org/@bota-apps/react-components/-/react-components-0.17.0.tgz",
    "unpackedSize": 378411
  },
  "dist-tags": {
    "latest": "0.17.0"
  },
  "latest_version": "0.17.0",
  "maintainers": [
    {
      "email": "imusema.hassen@icloud.com",
      "name": "bota-apps"
    }
  ],
  "num_versions": 44,
  "repository": {
    "directory": "packages/react-components",
    "type": "git",
    "url": "git+https://github.com/bota-apps/packages.git"
  },
  "scripts": {
    "build": "rm -rf dist && tsc && node ../../scripts/fixExtensions.mjs",
    "clean": "rm -rf dist",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "rapid_release": "6 versions in last 24h: ['0.14.1', '0.15.0', '0.16.0', '0.16.1', '0.17.0']",
    "repo_too_new_for_version_history": "claimed repo created 17d ago but package has 44 versions (expect >= 98d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/bota-apps/packages.git' also claimed by 10 package(s) under different publishers: ['npm/@bota-apps/auth-client', 'npm/@bota-apps/fm', 'npm/@bota-apps/gql-codegen'] ..."
  },
  "time": {
    "created": "2026-06-30T16:58:19.699Z",
    "modified": "2026-07-23T09:08:37.255Z"
  }
}