BEACON

← candidates

npm @cubist-labs/cubesigner-sdk-key-import @0.4.259

score
0.7375 high
flagged 2026-06-05 07:28
signals by category
topology 2

maintainers added: —

package profile →

Signals fired

signalweightrationale
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/cubist-labs/CubeSigner-TypeScript-SDK.git' also claimed by 4 package(s) under different publishers: ['npm/@cubist-labs/cubesigner-sdk-browser-storage', 'npm/@cubist-labs/cubesigner-sdk', 'npm/@cubist-labs/cubesigner-sdk-fs-storage'] ...
dependency_added_unknown 0.6 8 new non-watchlisted dep(s): ['@auth0/cose', '@hpke/core', '@peculiar/asn1-ecc', '@peculiar/asn1-schema', '@peculiar/x509'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "mlfbrown_cubist",
    "amilicevic",
    "noetzli"
  ],
  "versions": 87
}

Evidence (package doc at flag time)

{
  "dependencies_count": 8,
  "dist": {
    "integrity": "sha512-HUdKNlwcKXNZsDFQ5Tsxs/j0V7ZrqFrucE+bHuzPQ6zYmMzM5URuYJQFdnBtkovTxUyicbUylMKIiDlFios1WA==",
    "tarball": "https://registry.npmjs.org/@cubist-labs/cubesigner-sdk-key-import/-/cubesigner-sdk-key-import-0.4.259.tgz",
    "unpackedSize": 112233
  },
  "dist-tags": {
    "latest": "0.4.259"
  },
  "latest_version": "0.4.259",
  "maintainers": [
    {
      "email": "f@cubist.dev",
      "name": "mlfbrown_cubist"
    },
    {
      "email": "m@cubist.dev",
      "name": "amilicevic"
    },
    {
      "email": "n@cubist.dev",
      "name": "noetzli"
    }
  ],
  "num_versions": 89,
  "repository": {
    "directory": "packages/key-import",
    "type": "git",
    "url": "git+https://github.com/cubist-labs/CubeSigner-TypeScript-SDK.git"
  },
  "scripts": {
    "build": "tsc",
    "prepack": "tsc",
    "repl": "npx node --import tsx",
    "test": "npx --node-options='--experimental-vm-modules' jest --maxWorkers=1"
  },
  "signal_details": {
    "dependency_added_unknown": "8 new non-watchlisted dep(s): ['@auth0/cose', '@hpke/core', '@peculiar/asn1-ecc', '@peculiar/asn1-schema', '@peculiar/x509'] ...",
    "shared_repo_different_publisher": "repo 'git+https://github.com/cubist-labs/CubeSigner-TypeScript-SDK.git' also claimed by 4 package(s) under different publishers: ['npm/@cubist-labs/cubesigner-sdk-browser-storage', 'npm/@cubist-labs/cubesigner-sdk', 'npm/@cubist-labs/cubesigner-sdk-fs-storage'] ..."
  },
  "time": {
    "created": "2024-09-13T04:36:11.858Z",
    "modified": "2026-06-03T19:27:26.087Z"
  }
}