BEACON

← candidates

npm @or-sdk/auth @0.37.3

score
0.6 med
flagged 2026-07-23 10:27
signals by category
cadence 1 topology 3

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 3 versions in last 24h: ['0.37.1', '0.37.2', '0.37.3']
topology
no_repo 0.3 package.json has no repository field
dist_tag_anomaly 0.5 dist-tags.latest=0.37.3 but max published is 1.0.1-beta.1029.0
mass_publish_burst 0.8 publisher 'onereach.user' pushed 6 packages in the last 15min on npm

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "onereach.admin",
    "onereach.user"
  ],
  "versions": 431
}

Evidence (package doc at flag time)

{
  "dependencies_count": 7,
  "dist": {
    "integrity": "sha512-1LsExtH9QM7eHW8A9PC4VteI3kJTDT//Y/XeS21GSsI1SRv+gI7vtBgRrv/sfJ5qmYTFWYjVZX+bAQFhRGDSMg==",
    "tarball": "https://registry.npmjs.org/@or-sdk/auth/-/auth-0.37.3.tgz",
    "unpackedSize": 201955
  },
  "dist-tags": {
    "beta": "0.37.4-beta.80.0",
    "latest": "0.37.3"
  },
  "latest_version": "0.37.3",
  "maintainers": [
    {
      "email": "admin.npm@onereach.com",
      "name": "onereach.admin"
    },
    {
      "email": "admin.npm+user@onereach.com",
      "name": "onereach.user"
    }
  ],
  "num_versions": 432,
  "repository": null,
  "scripts": {
    "build": "pnpm clean && concurrently 'pnpm:build:*(!watch)'",
    "build:cjs": "tsc --project tsconfig.json",
    "build:esm": "tsc --project tsconfig.esm.json",
    "build:types": "tsc --project tsconfig.types.json",
    "build:watch": "concurrently 'pnpm:build:watch:*'",
    "build:watch:cjs": "tsc --project tsconfig.json -w",
    "build:watch:esm": "tsc --project tsconfig.esm.json -w",
    "build:watch:types": "tsc --project tsconfig.types.json -w",
    "clean": "rm -rf ./dist",
    "dev": "pnpm build:watch:esm",
    "test": "vitest"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=0.37.3 but max published is 1.0.1-beta.1029.0",
    "mass_publish_burst": "publisher 'onereach.user' pushed 6 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field",
    "rapid_release": "3 versions in last 24h: ['0.37.1', '0.37.2', '0.37.3']"
  },
  "time": {
    "created": "2022-03-28T09:02:47.306Z",
    "modified": "2026-07-23T15:27:23.522Z"
  }
}