npm staying-alive @1.0.3

score

0.9823 high

flagged 2026-07-27 10:57

signals by category

identity 1 cadence 1 topology 1 enrichment 1

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

dormant_burst + publisher_unrecognized: classic ATO: dormant package taken over and republished (+0.20)
repository_url_changed + publisher_unrecognized: repo ownership claim shifted during identity churn (+0.10)

Signals fired

signal	weight	rationale
identity
publisher_unrecognized	0.7	latest published by 'CircleCI', not in maintainer set
cadence
dormant_burst	1.0	dormant 500d (prev 1.0.2), then 1.0.3 just published
topology
repository_url_changed	0.7	'git@github.com:datacamp-engineering/staying-alive.git' -> 'git+ssh://git@github.com/datacamp-engineering/staying-alive.git'
enrichment
repo_doesnt_exist	1.0	claimed repo datacamp-engineering/staying-alive returns 404 on github.com

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "datacamp-machine-user"
  ],
  "versions": 21
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-QLzbpo9D12XSHYlHLbCR9yqSpCDqrYaEtSNnUfIjbb9KRfvUaigtCoReAoT70tCTDtBtkDf879fhCMwkrof0sA==",
    "tarball": "https://registry.npmjs.org/staying-alive/-/staying-alive-1.0.3.tgz",
    "unpackedSize": 68655
  },
  "dist-tags": {
    "beta": "1.0.3-beta.2",
    "latest": "1.0.3"
  },
  "latest_version": "1.0.3",
  "maintainers": [
    {
      "email": "engineering+npmjs@datacamp.com",
      "name": "datacamp-machine-user"
    }
  ],
  "num_versions": 22,
  "repository": {
    "type": "git",
    "url": "git+ssh://git@github.com/datacamp-engineering/staying-alive.git"
  },
  "scripts": {
    "build": "tsc -p tsconfig.build.json && tsc -p tsconfig.build-esm.json && tsc-esm-fix --tsconfig='tsconfig.build-esm.json' --target='dist/esm' && cp README.md package.json dist/ && echo '{\"type\":\"module\"}' > dist/esm/package.json",
    "changeset": "changeset",
    "lint": "eslint . --ext ts,js",
    "release": "changeset version",
    "test": "jest"
  },
  "signal_details": {
    "_amplifiers": [
      "dormant_burst + publisher_unrecognized: classic ATO: dormant package taken over and republished (+0.20)",
      "repository_url_changed + publisher_unrecognized: repo ownership claim shifted during identity churn (+0.10)"
    ],
    "dormant_burst": "dormant 500d (prev 1.0.2), then 1.0.3 just published",
    "publisher_unrecognized": "latest published by 'CircleCI', not in maintainer set",
    "repo_doesnt_exist": "claimed repo datacamp-engineering/staying-alive returns 404 on github.com",
    "repository_url_changed": "'git@github.com:datacamp-engineering/staying-alive.git' -> 'git+ssh://git@github.com/datacamp-engineering/staying-alive.git'"
  },
  "time": {
    "created": "2023-01-17T12:04:32.603Z",
    "modified": "2026-07-27T15:57:34.199Z"
  }
}