BEACON

← candidates

npm @pagopa/dx-cli @0.26.4

score
0.7179 high
flagged 2026-07-28 10:34
signals by category
identity 1 content 1 topology 2

maintainers added: giuseppe-nuccio-crea

package profile →

Signals fired

signalweightrationale
identity
maintainer_churn 1.0 added: ['giuseppe-nuccio-crea']
content
size_spike 0.5 unpackedSize 251750 -> 901048 (3.6×)
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/pagopa/dx.git' also claimed by 7 package(s) under different publishers: ['npm/@pagopa/dx-savemoney', 'npm/@pagopa/azure-tracing', 'npm/@pagopa/dx-mcpserver'] ...
dependency_added_unknown 0.6 8 new non-watchlisted dep(s): ['@azure/monitor-opentelemetry', '@logtape/otel', '@opentelemetry/api', '@opentelemetry/api-logs', '@opentelemetry/instrumentation'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "pagopa-bot",
    "pasqualedevita",
    "pp-ps",
    "diego.lagosmorales"
  ],
  "versions": 71
}

Evidence (package doc at flag time)

{
  "dependencies_count": 36,
  "dist": {
    "integrity": "sha512-Bm7HnKEc2FJVdyVWTx+6ELMK3Ki84Sv25WqivbBNVWNNQNskyNhOmGl2vnJ2WwaMQB/AUaDa4qRUghpB/iarkg==",
    "tarball": "https://registry.npmjs.org/@pagopa/dx-cli/-/dx-cli-0.26.4.tgz",
    "unpackedSize": 901048
  },
  "dist-tags": {
    "latest": "0.26.4"
  },
  "latest_version": "0.26.4",
  "maintainers": [
    {
      "email": "pietro.stroia@pagopa.it",
      "name": "pp-ps"
    },
    {
      "email": "giuseppenuccio.crea@pagopa.it",
      "name": "giuseppe-nuccio-crea"
    },
    {
      "email": "diego.lagosmorales@pagopa.it",
      "name": "diego.lagosmorales"
    }
  ],
  "num_versions": 83,
  "repository": {
    "directory": "apps/cli",
    "type": "git",
    "url": "git+https://github.com/pagopa/dx.git"
  },
  "scripts": {
    "format": "prettier --write .",
    "format:check": "prettier --check .",
    "plop": "plop"
  },
  "signal_details": {
    "dependency_added_unknown": "8 new non-watchlisted dep(s): ['@azure/monitor-opentelemetry', '@logtape/otel', '@opentelemetry/api', '@opentelemetry/api-logs', '@opentelemetry/instrumentation'] ...",
    "maintainer_churn": "added: ['giuseppe-nuccio-crea']",
    "shared_repo_different_publisher": "repo 'git+https://github.com/pagopa/dx.git' also claimed by 7 package(s) under different publishers: ['npm/@pagopa/dx-savemoney', 'npm/@pagopa/azure-tracing', 'npm/@pagopa/dx-mcpserver'] ...",
    "size_spike": "unpackedSize 251750 -> 901048 (3.6\u00d7)"
  },
  "time": {
    "created": "2025-08-01T08:17:10.429Z",
    "modified": "2026-07-28T15:34:41.251Z"
  }
}