npm @terrazzo/token-tools @2.5.0
score
0.7206
high
flagged
2026-07-27 08:38
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/terrazzoapp/terrazzo.git' also claimed by 10 package(s) under different publishers: ['npm/@terrazzo/token-types', 'npm/@terrazzo/cli', 'npm/@terrazzo/plugin-token-listing'] ... |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['@terrazzo/token-types'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"drewpowers"
],
"versions": 73
}
Evidence (package doc at flag time)
{
"dependencies_count": 4,
"dist": {
"integrity": "sha512-CREnj4kmbskWugkNCA8SYFcjJmlNpXci2ft9U8GjLOdi5eNkWGjDSW5U3oxn+BQkm0mNjWrWBloyg/L6vzFnWA==",
"tarball": "https://registry.npmjs.org/@terrazzo/token-tools/-/token-tools-2.5.0.tgz",
"unpackedSize": 123169
},
"dist-tags": {
"alpha": "2.0.0-rc.0",
"latest": "2.5.0",
"rc": "2.0.0-rc.0"
},
"latest_version": "2.5.0",
"maintainers": [
{
"email": "drew@pow.rs",
"name": "drewpowers"
}
],
"num_versions": 75,
"repository": {
"directory": "./packages/token-tools/",
"type": "git",
"url": "https://github.com/terrazzoapp/terrazzo.git"
},
"scripts": {
"build": "tsc -b tsconfig.build.json && attw --profile esm-only --pack .",
"dev": "tsc -b tsconfig.build.json -w",
"fmt": "oxfmt",
"fmt:check": "oxfmt --check",
"lint": "oxlint --quiet && oxfmt --check && tsc --noEmit",
"test": "vitest run"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['@terrazzo/token-types']",
"shared_repo_different_publisher": "repo 'https://github.com/terrazzoapp/terrazzo.git' also claimed by 10 package(s) under different publishers: ['npm/@terrazzo/token-types', 'npm/@terrazzo/cli', 'npm/@terrazzo/plugin-token-listing'] ..."
},
"time": {
"created": "2024-04-26T04:09:26.637Z",
"modified": "2026-07-27T13:38:24.088Z"
}
}