npm @drever/brand @0.2.2

score

0.579 med

flagged 2026-07-25 14:32

signals by category

cadence 1 topology 1 enrichment 1

maintainers added: —

Signals fired

signal	weight	rationale
cadence
rapid_release	0.8	4 versions in last 24h: ['0.1.1', '0.2.0', '0.2.1', '0.2.2']
topology
shared_repo_different_publisher	0.9	repo 'git+https://github.com/Zhangdroid/drever.git' also claimed by 10 package(s) under different publishers: ['npm/@drever/client', 'npm/@drever/plugin-charts', 'npm/@drever/plugin-gfm'] ...
enrichment
repo_too_new_for_version_history	0.7	claimed repo created 2d ago but package has 11 versions (expect >= 62d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "zhangdroid"
  ],
  "versions": 11
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-u3rCUC5jb4x8w0Vvqg20LPPysUwyqXTOf1FSn+Gb42RsHRDUsbfz80VzhLEDAND3ucjANBdm40cs4rC9b3iSRQ==",
    "tarball": "https://registry.npmjs.org/@drever/brand/-/brand-0.2.2.tgz",
    "unpackedSize": 325023
  },
  "dist-tags": {
    "commit": "0.0.0-commit.g830214c62974",
    "latest": "0.2.2"
  },
  "latest_version": "0.2.2",
  "maintainers": [
    {
      "email": "npm@zhuo.dev",
      "name": "zhangdroid"
    }
  ],
  "num_versions": 11,
  "repository": {
    "directory": "packages/brand",
    "type": "git",
    "url": "git+https://github.com/Zhangdroid/drever.git"
  },
  "scripts": {
    "build": "node scripts/generate-tokens.mjs --check && vp pack",
    "check": "node scripts/generate-tokens.mjs --check && vp check",
    "generate": "node scripts/generate-tokens.mjs",
    "test": "vp test"
  },
  "signal_details": {
    "rapid_release": "4 versions in last 24h: ['0.1.1', '0.2.0', '0.2.1', '0.2.2']",
    "repo_too_new_for_version_history": "claimed repo created 2d ago but package has 11 versions (expect >= 62d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/Zhangdroid/drever.git' also claimed by 10 package(s) under different publishers: ['npm/@drever/client', 'npm/@drever/plugin-charts', 'npm/@drever/plugin-gfm'] ..."
  },
  "time": {
    "created": "2026-07-23T02:39:35.809Z",
    "modified": "2026-07-25T06:20:26.565Z"
  }
}