BEACON

← candidates

npm create-sy @3.18.1

score
0.8478 high
flagged 2026-07-24 08:06
signals by category
content 1 topology 1

maintainers added:

package profile →

Signals fired

signalweightrationale
content
provenance_dropped 0.8 prior version published with SLSA attestation; current version has none
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/syngrisi/syngrisi.git' also claimed by 4 package(s) under different publishers: ['npm/wdio-cucumber-viewport-logger-service', 'npm/@syngrisi/core-api', 'npm/wdio-syngrisi-cucumber-service'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "svp1105714"
  ],
  "versions": 97
}

Evidence (package doc at flag time)

{
  "dependencies_count": 2,
  "dist": {
    "integrity": "sha512-rxpqYGHH8LjxhcHGzWA7SlVBjtEzswrXObC+J/3JemEBYwHc6BWgXJv/ul00eoqySKnL8ly56M27KSdoIzhoaA==",
    "tarball": "https://registry.npmjs.org/create-sy/-/create-sy-3.18.1.tgz",
    "unpackedSize": 22301
  },
  "dist-tags": {
    "latest": "3.18.1"
  },
  "latest_version": "3.18.1",
  "maintainers": [
    {
      "email": "1105714@gmail.com",
      "name": "svp1105714"
    }
  ],
  "num_versions": 99,
  "repository": {
    "directory": "packages/create-sy",
    "type": "git",
    "url": "git+https://github.com/syngrisi/syngrisi.git"
  },
  "scripts": {
    "build": "run-s clean compile",
    "clean": "rimraf tsconfig.tsbuildinfo ./build ./coverage",
    "compile": "tsc -p ./tsconfig.json",
    "e2e:node18": "vitest run --config e2e/vitest.e2e.config.ts e2e/tests/node-versions/node18.e2e.ts",
    "e2e:node20": "vitest run --config e2e/vitest.e2e.config.ts e2e/tests/node-versions/node20.e2e.ts",
    "e2e:node22": "vitest run --config e2e/vitest.e2e.config.ts e2e/tests/node-versions/node22.e2e.ts",
    "e2e:run": "vitest run --config e2e/vitest.e2e.config.ts",
    "e2e:setup": "bash e2e/container/start-containers.sh --build",
    "e2e:teardown": "bash e2e/container/stop-containers.sh",
    "release": "release-it --github.release",
    "release:ci": "run-s 'release -- --ci --npm.skipChecks --no-git.requireCleanWorkingDir'",
    "release:major": "run-s 'release -- major'",
    "release:minor": "run-s 'release -- minor'",
    "release:patch": "run-s 'release -- patch'",
    "test": "run-s build test:eslint test:unit",
    "test:e2e": "run-s e2e:setup e2e:run",
    "test:eslint": "ESLINT_USE_FLAT_CONFIG=false eslint -c ./.eslintrc.cjs ./src/**/*.ts ./tests/**/*.ts",
    "test:unit": "vitest run",
    "watch": "tsc -p ./tsconfig.json --watch"
  },
  "signal_details": {
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "shared_repo_different_publisher": "repo 'git+https://github.com/syngrisi/syngrisi.git' also claimed by 4 package(s) under different publishers: ['npm/wdio-cucumber-viewport-logger-service', 'npm/@syngrisi/core-api', 'npm/wdio-syngrisi-cucumber-service'] ..."
  },
  "time": {
    "created": "2023-03-14T08:18:29.141Z",
    "modified": "2026-07-24T13:06:12.468Z"
  }
}