BEACON

← candidates

npm @cat-factory/sandbox @0.10.3

score
0.8 high
flagged 2026-07-28 11:45
signals by category
cadence 1 topology 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 12 versions in last 24h: ['0.9.164', '0.10.0', '0.10.1', '0.10.2', '0.10.3']
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/kibertoad/cat-factory.git' also claimed by 10 package(s) under different publishers: ['npm/@cat-factory/caching', 'npm/@cat-factory/spend', 'npm/@cat-factory/local-server'] ...
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 46d ago but package has 300 versions (expect >= 148d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "kibertoad"
  ],
  "versions": 299
}

Evidence (package doc at flag time)

{
  "dependencies_count": 4,
  "dist": {
    "integrity": "sha512-DKN64TdSJoLMq10Y409TKABKNOodwvYD1F8Y4dEVOW4ylwTEKT3jf6L/4AwWEW5Wc571HwjGm3ijDLHJ7kGmiA==",
    "tarball": "https://registry.npmjs.org/@cat-factory/sandbox/-/sandbox-0.10.3.tgz",
    "unpackedSize": 52355
  },
  "dist-tags": {
    "latest": "0.10.3"
  },
  "latest_version": "0.10.3",
  "maintainers": [
    {
      "email": "iselwin@gmail.com",
      "name": "kibertoad"
    }
  ],
  "num_versions": 300,
  "repository": {
    "directory": "backend/packages/sandbox",
    "type": "git",
    "url": "git+https://github.com/kibertoad/cat-factory.git"
  },
  "scripts": {
    "build": "tsc -b tsconfig.build.json",
    "test": "vitest run",
    "test:run": "vitest run",
    "typecheck": "tsc -p tsconfig.json --noEmit"
  },
  "signal_details": {
    "rapid_release": "12 versions in last 24h: ['0.9.164', '0.10.0', '0.10.1', '0.10.2', '0.10.3']",
    "repo_too_new_for_version_history": "claimed repo created 46d ago but package has 300 versions (expect >= 148d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/kibertoad/cat-factory.git' also claimed by 10 package(s) under different publishers: ['npm/@cat-factory/caching', 'npm/@cat-factory/spend', 'npm/@cat-factory/local-server'] ..."
  },
  "time": {
    "created": "2026-06-24T15:22:28.494Z",
    "modified": "2026-07-28T15:52:04.540Z"
  }
}