BEACON

← candidates

npm context @4.0.17

score
0.8 high
flagged 2026-06-05 08:08
signals by category
topology 3

maintainers added: —

package profile →

Signals fired

signalweightrationale
topology
typosquat 1.0 lev=1 to watched 'cortext'
dist_tag_anomaly 0.5 dist-tags.latest=4.0.17 but max published is 4.0.18-nightly-20260407-7e44
shared_repo_different_publisher 0.9 repo 'git+https://github.com/ealush/vest.git' also claimed by 6 package(s) under different publishers: ['npm/vast', 'npm/vest', 'npm/vestjs-runtime'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "ealush"
  ],
  "versions": 256
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-SM/Rmr9egp0N3+t0kfIFz1Dayfcl+8bussTdW0lw9gU+KUe3v+QPVyxvr+KzVx13U5Ac0dCdjGacWION6NuRUQ==",
    "tarball": "https://registry.npmjs.org/context/-/context-4.0.17.tgz",
    "unpackedSize": 37066
  },
  "dist-tags": {
    "dev": "3.0.33-dev-20241111-bedd",
    "latest": "4.0.17",
    "next": "4.0.14-next-20260318-d8c2",
    "nightly": "4.0.18-nightly-20260605-7e44"
  },
  "latest_version": "4.0.17",
  "maintainers": [
    {
      "email": "code@ealush.com",
      "name": "ealush"
    }
  ],
  "num_versions": 256,
  "repository": {
    "directory": "packages/context",
    "type": "git",
    "url": "git+https://github.com/ealush/vest.git"
  },
  "scripts": {
    "build": "vx build",
    "release": "vx release",
    "test": "vx test"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=4.0.17 but max published is 4.0.18-nightly-20260407-7e44",
    "shared_repo_different_publisher": "repo 'git+https://github.com/ealush/vest.git' also claimed by 6 package(s) under different publishers: ['npm/vast', 'npm/vest', 'npm/vestjs-runtime'] ...",
    "typosquat": "lev=1 to watched 'cortext'"
  },
  "time": {
    "created": "2014-05-11T19:05:50.632Z",
    "modified": "2026-06-05T03:53:47.544Z"
  }
}