npm @lolmath/ui @8.1.0

score

0.9655 high

flagged 2026-07-26 16:42

signals by category

identity 1 cadence 1 topology 2

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

dormant_burst + publisher_unrecognized: classic ATO: dormant package taken over and republished (+0.20)

Signals fired

signal	weight	rationale
identity
publisher_unrecognized	0.7	latest published by 'GitLab CI/CD', not in maintainer set
cadence
dormant_burst	1.0	dormant 220d (prev 8.1.0), then 9.0.0 just published
topology
dist_tag_anomaly	0.5	dist-tags.latest=8.1.0 but max published is 9.0.0
shared_repo_different_publisher	0.9	repo 'git+https://gitlab.com/lol-math/lolmath.git' also claimed by 1 package(s) under different publishers: ['npm/@lolmath/typedoc']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "lolmathcd",
    "meesvandongen"
  ],
  "versions": 90
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-vALQgpzPX1nN8AKkV6pNKlRyhVXI7lpXZe9sB6fzgI4WgoJPAnm12wkXidfmKmOfPVZKnSczPvrQnA4ogmIlGA==",
    "tarball": "https://registry.npmjs.org/@lolmath/ui/-/ui-8.1.0.tgz",
    "unpackedSize": 1640531
  },
  "dist-tags": {
    "canary": "9.0.0",
    "latest": "8.1.0"
  },
  "latest_version": "8.1.0",
  "maintainers": [
    {
      "email": "admin@lolmath.net",
      "name": "lolmathcd"
    },
    {
      "email": "meesvandongen@gmail.com",
      "name": "meesvandongen"
    }
  ],
  "num_versions": 91,
  "repository": {
    "directory": "packages/ui",
    "type": "git",
    "url": "git+https://gitlab.com/lol-math/lolmath.git"
  },
  "scripts": {
    "build": "modern build",
    "dev": "modern build --watch",
    "docs": "node ./docs.ts",
    "publint": "publint",
    "typecheck": "tsgo --noEmit"
  },
  "signal_details": {
    "_amplifiers": [
      "dormant_burst + publisher_unrecognized: classic ATO: dormant package taken over and republished (+0.20)"
    ],
    "dist_tag_anomaly": "dist-tags.latest=8.1.0 but max published is 9.0.0",
    "dormant_burst": "dormant 220d (prev 8.1.0), then 9.0.0 just published",
    "publisher_unrecognized": "latest published by 'GitLab CI/CD', not in maintainer set",
    "shared_repo_different_publisher": "repo 'git+https://gitlab.com/lol-math/lolmath.git' also claimed by 1 package(s) under different publishers: ['npm/@lolmath/typedoc']"
  },
  "time": {
    "created": "2023-08-13T20:15:18.834Z",
    "modified": "2026-07-26T17:58:38.842Z"
  }
}