npm @depup/js-yaml @5.2.2-depup.5
score
0.5555
med
flagged
2026-07-25 11:20
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| mass_publish_burst | 0.8 | publisher 'chiefmikey' pushed 6 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/nodeca/js-yaml.git' also claimed by 1 package(s) under different publishers: ['npm/js-yaml'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"chiefmikey"
],
"versions": 6
}
Evidence (package doc at flag time)
{
"dependencies_count": 1,
"dist": {
"integrity": "sha512-4ybAS569RjMwF5ZMmuOiyW++FkQo4+4M4NZgigOD2hWf7bMQ5t5ZQ0RCnngLsi/m8ICWzYfc7s+BwVtqEuJT+A==",
"tarball": "https://registry.npmjs.org/@depup/js-yaml/-/js-yaml-5.2.2-depup.5.tgz",
"unpackedSize": 1436028
},
"dist-tags": {
"latest": "5.2.2-depup.5"
},
"latest_version": "5.2.2-depup.5",
"maintainers": [
{
"email": "wolfemikl@gmail.com",
"name": "chiefmikey"
}
],
"num_versions": 7,
"repository": {
"type": "git",
"url": "git+https://github.com/nodeca/js-yaml.git"
},
"scripts": {
"benchmark:deps": "npm install --prefix benchmark/extra/",
"build": "node support/build-dist.mjs",
"build:demo": "npm run lint && node support/build_demo.mjs",
"coverage": "npm run build && npm run spec:get && c8 --include 'dist/js-yaml.mjs' --include 'src/**' -r text -r html -r lcov node --test 'test/core/**/*.test.mjs' 'test/spec/*.test.mjs'",
"gh-demo": "npm run build:demo && gh-pages -d demo -f",
"lint": "eslint .",
"lint-fix": "eslint . --fix",
"postpublish": "npm run gh-demo",
"spec:get": "node support/get-yaml-test-suite.mjs",
"spec:update": "node support/get-yaml-test-suite.mjs update",
"test": "npm run lint && npm run build && npm run type-check && npm run test:examples && npm run spec:get && node --test 'test/core/**/*.test.mjs' 'test/spec/*.test.mjs'",
"test:examples": "node --test 'examples/*.mjs'",
"test:spec": "npm run build && npm run spec:get && node test/spec/spec.test.mjs",
"type-check": "tsc --noEmit"
},
"signal_details": {
"mass_publish_burst": "publisher 'chiefmikey' pushed 6 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/nodeca/js-yaml.git' also claimed by 1 package(s) under different publishers: ['npm/js-yaml']"
},
"time": {
"created": "2026-07-21T16:17:33.395Z",
"modified": "2026-07-25T16:20:13.788Z"
}
}