npm create-project-calavera @2.2.0
score
0.5736
med
flagged
2026-07-26 12:14
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=2.2.0 but max published is 2.3.0-next.2 |
| shared_repo_different_publisher | 0.9 | repo 'git+ssh://git@github.com/schalkneethling/create-project-calavera.git' also claimed by 10 package(s) under different publishers: ['npm/@schalkneethling/calavera-skill-frontend-engineering', 'npm/@schalkneethling/calavera-skill-npm-publishing-best-practices', 'npm/@schalkneethling/calavera-artifact-core'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"schalkneethling"
],
"versions": 24
}
Evidence (package doc at flag time)
{
"dependencies_count": 5,
"dist": {
"integrity": "sha512-juYbep+uBYouNmjo6X2hC5mzLx6Q0V02ve770GEYsDW5ZRfaS/DX7DnnykR6BPcOiLdYZwXe9V2iFg2B3s8gvw==",
"tarball": "https://registry.npmjs.org/create-project-calavera/-/create-project-calavera-2.2.0.tgz",
"unpackedSize": 585513
},
"dist-tags": {
"latest": "2.2.0",
"next": "2.3.0-next.3"
},
"latest_version": "2.2.0",
"maintainers": [
{
"email": "volume4.schalk+npmjs@gmail.com",
"name": "schalkneethling"
}
],
"num_versions": 25,
"repository": {
"type": "git",
"url": "git+ssh://git@github.com/schalkneethling/create-project-calavera.git"
},
"scripts": {
"check": "pnpm quality",
"format": "oxfmt --write .",
"format:all": "oxfmt --write .",
"format:all:check": "oxfmt --check .",
"format:check": "oxfmt --check .",
"lint": "oxlint . && stylelint \"**/*.{css,scss}\"",
"lint:css": "stylelint **/*.css",
"lint:fix": "oxlint --fix . && stylelint \"**/*.{css,scss}\" --fix",
"lint:js": "eslint .",
"prettier:format": "prettier --write .",
"prettier:lint": "prettier .",
"publish:check": "publint",
"quality": "pnpm lint && pnpm format:all:check && pnpm typecheck && pnpm test",
"schema:check": "node --test scripts/check-config-schema.test.mjs",
"test": "node --test scripts/*.test.mjs",
"typecheck": "tsc --noEmit",
"web:build": "vite build",
"web:dev": "vite --host 127.0.0.1",
"web:preview": "vite preview --host 127.0.0.1",
"workflow:check": "uvx zizmor@1.25.2 --offline .github/workflows"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=2.2.0 but max published is 2.3.0-next.2",
"shared_repo_different_publisher": "repo 'git+ssh://git@github.com/schalkneethling/create-project-calavera.git' also claimed by 10 package(s) under different publishers: ['npm/@schalkneethling/calavera-skill-frontend-engineering', 'npm/@schalkneethling/calavera-skill-npm-publishing-best-practices', 'npm/@schalkneethling/calavera-artifact-core'] ..."
},
"time": {
"created": "2024-12-14T23:17:45.601Z",
"modified": "2026-07-26T12:18:46.292Z"
}
}