BEACON

← candidates

npm @sentio/sdk-bundle @4.3.4

score
0.7 high
flagged 2026-07-28 03:55
signals by category
topology 2 enrichment 1

maintainers added: —

package profile →

Signals fired

signalweightrationale
topology
dist_tag_anomaly 0.5 dist-tags.latest=4.3.4 but max published is 4.3.5-rc.1
shared_repo_different_publisher 0.9 repo 'git+https://github.com/sentioxyz/sentio-sdk.git' also claimed by 4 package(s) under different publishers: ['npm/@sentio/sdk', 'npm/@sentio/runtime', 'npm/@sentio/action'] ...
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 154d ago but package has 690 versions (expect >= 170d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "longw",
    "allendragon",
    "philz3906",
    "pooytr1",
    "rnons",
    "lzx_lizixing",
    "frozenluo"
  ],
  "versions": 690
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-NJ9ZV0iYLXFGpUgMgM6pvbHmRlZ9tmKI6rNiKx0vYaHPAYpQvR/s0CHuvlk31jB2R5OOZkZoT05z8IPL+n93xw==",
    "tarball": "https://registry.npmjs.org/@sentio/sdk-bundle/-/sdk-bundle-4.3.4.tgz",
    "unpackedSize": 33364570
  },
  "dist-tags": {
    "latest": "4.3.4",
    "rc": "4.3.5-rc.1",
    "rc2": "2.63.1-rc2.1",
    "rc3": "3.8.1-rc3.1"
  },
  "latest_version": "4.3.4",
  "maintainers": [
    {
      "email": "lwedge99@gmail.com",
      "name": "longw"
    },
    {
      "email": "allendragon@gmail.com",
      "name": "allendragon"
    },
    {
      "email": "philz3906@gmail.com",
      "name": "philz3906"
    },
    {
      "email": "pooytr1@gmail.com",
      "name": "pooytr1"
    },
    {
      "email": "remotenonsense@gmail.com",
      "name": "rnons"
    },
    {
      "email": "lzx.lizixing@gmail.com",
      "name": "lzx_lizixing"
    },
    {
      "email": "frozenluo@gmail.com",
      "name": "frozenluo"
    }
  ],
  "num_versions": 690,
  "repository": {
    "directory": "packages/sdk",
    "type": "git",
    "url": "git+https://github.com/sentioxyz/sentio-sdk.git"
  },
  "scripts": {},
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=4.3.4 but max published is 4.3.5-rc.1",
    "repo_too_new_for_version_history": "claimed repo created 154d ago but package has 690 versions (expect >= 170d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/sentioxyz/sentio-sdk.git' also claimed by 4 package(s) under different publishers: ['npm/@sentio/sdk', 'npm/@sentio/runtime', 'npm/@sentio/action'] ..."
  },
  "time": {
    "created": "2024-07-13T04:04:19.668Z",
    "modified": "2026-07-28T06:00:51.134Z"
  }
}