← candidates

npm auth @1.6.25

Signals fired

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "bekacru"
  ],
  "versions": 73
}

Evidence (package doc at flag time)

{
  "dependencies_count": 20,
  "dist": {
    "integrity": "sha512-wyNvrDEQkcP4Lyo2GzYkngFstcswInItrqmJD3lz+Dkm5iceoNoBojfA+7xcEcsQDuFKsDU2Ho+VGllhs5a8lw==",
    "tarball": "https://registry.npmjs.org/auth/-/auth-1.6.25.tgz",
    "unpackedSize": 277911
  },
  "dist-tags": {
    "beta": "1.7.0-beta.10",
    "latest": "1.6.25",
    "rc": "1.7.0-rc.2"
  },
  "latest_version": "1.6.25",
  "maintainers": [
    {
      "email": "Bekacru@gmail.com",
      "name": "bekacru"
    }
  ],
  "num_versions": 75,
  "repository": {
    "directory": "packages/cli",
    "type": "git",
    "url": "git+https://github.com/better-auth/better-auth.git"
  },
  "scripts": {
    "build": "tsdown",
    "coverage": "vitest run --coverage --coverage.provider=istanbul",
    "dev": "tsx ./src/index.ts",
    "lint:package": "publint run --strict --pack false",
    "lint:types": "attw --profile esm-only --pack .",
    "start": "node ./dist/index.mjs",
    "test": "vitest",
    "typecheck": "tsc --project tsconfig.json"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=1.6.25 but max published is 1.7.0-beta.0",
    "shared_repo_different_publisher": "repo 'git+https://github.com/better-auth/better-auth.git' also claimed by 10 package(s) under different publishers: ['npm/@better-auth/core', 'npm/@better-auth/redis-storage', 'npm/@better-auth/expo'] ...",
    "typosquat": "lev=1 to watched 'auth0'"
  },
  "time": {
    "created": "2012-10-28T19:15:48.907Z",
    "modified": "2026-07-23T15:48:13.376Z"
  }
}