npm @mondaydotcomorg/tunnel @0.4.2
score
0.5775
med
flagged
2026-06-05 06:58
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| maintainer_churn | 1.0 | added: ['marekpe'] |
| publisher_unrecognized | 0.7 | latest published by 'adamru-monday', not in maintainer set |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/mondaycom/tunnel.git' also claimed by 1 package(s) under different publishers: ['npm/@mondaydotcomorg/tunnel-server'] |
| enrichment | ||
| repo_archived | 0.7 | claimed repo mondaycom/tunnel is archived but package keeps publishing |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"lior_bloch_arkis",
"yanivli",
"inbalsl-mndy",
"luka-fritzsche",
"sagi-dahan",
"idanluf",
"itaysimon",
"giladmiron",
"idosal-mndy",
"ronykod",
"linahanin",
"edenbarcoco",
"dinportnoy",
"talmoneta",
"glivnat",
"adili",
"adarh",
"tomkap",
"esty-ye",
"orief-monday",
"grivos",
"oleh_atlanov",
"liorpo-npm",
"pazde",
"maykishon",
"imriisaacson",
"deanif",
"omersha",
"uriafr",
"matantessler",
"rotemzm",
"michalsz-monday",
"almogro-monday",
"benjaminta",
"ronsh",
"kerenbenarie",
"rafael-aginyan",
"idan-aharoni",
"morantz",
"urika",
"arielyu",
"nitzan-mayer-wolf",
"avimi",
"cheli-hirsh-hakim",
"roeecs",
"taligueta",
"yehuda_npm",
"ronyakar",
"sergeyts4",
"raban86",
"marcinpo-monday",
"mariaki",
"sagytu",
"npm-devtools",
"annaloya",
"thiagozeitune",
"amitnissan",
"shaykeh",
"gilbar",
"eran_rozen",
"li-tal_kupperman",
"effiza",
"amitdan",
"ariellemonday",
"orrsegev-monday",
"amitman",
"rafalno-monday",
"galbaruch",
"npm-reporting",
"chen_mardix",
"harris_rosado",
"moranfr",
"yaelaloni",
"patrichad",
"bettybam",
"linoy_erez",
"didierbollag",
"veronicaquin",
"reitta",
"tamarnev",
"moransh",
"nadavshlezz",
"eranka",
"vittoriove-monday",
"rotemei",
"tamarhoresh",
"assafavishay",
"netanelda",
"nitzanezra",
"peterber",
"hadasashkenazi",
"nikkiam",
"diklakn",
"yanivdan",
"tamirg",
"baptistebl",
"itaytz",
"danielbe23",
"ohadfrankfurt",
"benhadad91",
"omrise",
"itamarsh",
"galdaich",
"adile1",
"galhe",
"lenasalgansky",
"shirab",
"inbalro",
"tomerlaszlo",
"danielma-monday",
"michalfrankel",
"netanelabmondaycom",
"marcinan",
"ronyrumer",
"lironpenso",
"chen_shanes",
"benjo4",
"noyshalev",
"yaron.sverdlov",
"razta",
"tom_beno",
"shaulef",
"sagi.nachum",
"rotembiton",
"shkodi147",
"danabu",
"adarkliger",
"amitcohe",
"michalavidan",
"inbarma",
"shaulro",
"barbrandwine",
"ronire",
"ilanmnsn",
"yuvalov",
"rotemav",
"shlomico",
"rotemro",
"danate",
"sandeepkunchamwar",
"nathanelmo",
"nirmoran",
"maayansht",
"itaybig",
"malichi",
"matanarb",
"lotemfr",
"noaron",
"karinbr",
"danielva",
"yuvalmaimon",
"hadasle",
"mxvtk",
"shahargoldreich",
"saml12ster",
"ranitnaeh",
"omrigil-monday",
"ciaraesc",
"yonatanha-monday",
"mattdanoff",
"ashertambor",
"dhumeida",
"krzysztofpi",
"omrile",
"not-razz-matazz",
"danielam-monday",
"glee-monday",
"mackenziedargan",
"chriske-monday",
"shaharbennantan",
"rebeccagedmin",
"victoriamu",
"dseugling",
"michellemonday",
"yossi-ab-monday",
"shai_menachem",
"paytonboyer13",
"maxbrokhman",
"orya",
"rotemonday",
"luanjo",
"nirro.monday",
"anna_hyatt",
"broster.monday",
"danano",
"antoniopironti",
"shaharga4",
"roish",
"orborochovich",
"talahmonday",
"nirfrid",
"mickaelbe",
"tomer-ast",
"eliorsi",
"jackstepner",
"moshekatz_monday",
"davidbr1",
"roykulik",
"orhay",
"tomer.monday",
"itamargold",
"ilyastoliar",
"alexji",
"tomerbr",
"adiraskansky",
"hennassimy",
"rotemassa123",
"moranrosenthalmonday",
"shanybar",
"cmp-monday",
"amirdana115",
"franciszekza",
"vikas-monday-new",
"maciejle",
"danfishbein",
"yoavgal",
"gordonso-md",
"sniryemndy",
"rotemzo",
"amitross",
"noasharvit",
"asaf4722monday",
"ori-morhaim",
"gregra",
"alonsa",
"noambla",
"eladav",
"nimrodado",
"aviad_danizger",
"maciej-monday",
"arinaonmonday",
"dalyagreen1",
"yonisadowsky",
"rossgaskellmndy",
"amitle",
"guyta",
"amit-naaman",
"oriblau",
"inbalsa",
"kerenko",
"jacky-monday",
"camronday",
"miguelfaase",
"sefini",
"phuman",
"naamayeffet",
"rotemit34",
"liamjherbie",
"danielsagi",
"devorahfr-monday",
"natbaw",
"bennyzi",
"ohadshefer",
"doronna",
"matbec96",
"obinnaub",
"idofinder",
"oryba",
"liangcaoldn",
"guygot",
"zivam",
"noare",
"tsemach_lifshitz",
"felixnpm",
"danielmil",
"sasahst",
"jberrz",
"monday-infra-admin",
"monday-npm-publisher",
"yardenay",
"mikolaj-kubik",
"dviryo",
"as-mondaydotcom",
"karolch",
"robpmd",
"liorwa",
"ivanko5417m",
"ronco-mndy",
"navele",
"eyalle",
"davidgrmonday",
"rotem-tetuani",
"palinaka-monday",
"avigail-hasida-monday",
"assafli",
"erez-ra",
"nassimha",
"dordub",
"omerpessach",
"omerke",
"sagitufman",
"matkot",
"jacekplonka",
"damianra",
"radekg",
"wojtek-gr",
"rafalbi",
"nattimonday",
"giladsa",
"jakub-sulkowski",
"amitmalihi",
"piotrja",
"ruslan-monday",
"lukaszwi",
"amirsi",
"ohad-monday",
"liora-monday",
"vakninr",
"arielb33",
"chandraprj",
"ayalast",
"oferme-mndy",
"amitshah-monday",
"mirondan",
"almogmonday",
"ahuvim",
"avihaife",
"moshe_crespin",
"mithunra",
"milanba-mondev",
"vdekht",
"patrykwo",
"przemyslawst",
"alobach",
"galga",
"lukaszda-monday",
"alexanderpy",
"maorko",
"shayfa-monday",
"or-stern",
"itayha",
"jeeljo",
"eitanov",
"yampallace",
"malkama",
"korengast",
"ofek-dayan"
],
"versions": 9
}
Evidence (package doc at flag time)
{
"dependencies_count": 9,
"dist": {
"integrity": "sha512-m7CPQm4CYbg8EqSJRjtuXc+WmGMh4CvboSZtOI7MQ15tBVfMRdtpFKxCSfgmHt+TeY8IMo2bXGBgpoHgfW7/WA==",
"tarball": "https://registry.npmjs.org/@mondaydotcomorg/tunnel/-/tunnel-0.4.2.tgz",
"unpackedSize": 41156
},
"dist-tags": {
"latest": "0.4.2"
},
"latest_version": "0.4.2",
"maintainers": [
{
"email": "sergeyts+4@monday.com",
"name": "sergeyts4"
},
{
"email": "marekpe@monday.com",
"name": "marekpe"
},
{
"email": "monday_infra_admin@monday.com",
"name": "monday-infra-admin"
},
{
"email": "npm-publisher@monday.com",
"name": "monday-npm-publisher"
}
],
"num_versions": 9,
"repository": {
"directory": "packages/tunnel",
"type": "git",
"url": "git+https://github.com/mondaycom/tunnel.git"
},
"scripts": null,
"signal_details": {
"maintainer_churn": "added: ['marekpe']",
"publisher_unrecognized": "latest published by 'adamru-monday', not in maintainer set",
"repo_archived": "claimed repo mondaycom/tunnel is archived but package keeps publishing",
"shared_repo_different_publisher": "repo 'git+https://github.com/mondaycom/tunnel.git' also claimed by 1 package(s) under different publishers: ['npm/@mondaydotcomorg/tunnel-server']"
},
"time": {
"created": "2022-08-18T09:58:54.951Z",
"modified": "2026-06-03T22:56:54.566Z"
}
}