BEACON

← candidates

npm snyk-docker-plugin @9.9.0

score
0.75 high
flagged 2026-06-05 08:58
signals by category
identity 1 topology 1

maintainers added:

package profile →

Signals fired

signalweightrationale
identity
publisher_unrecognized 0.7 latest published by 'CircleCI', not in maintainer set
topology
mass_publish_burst 0.8 publisher 'CircleCI' pushed 6 packages in the last 15min on npm

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "snyk-admin"
  ],
  "versions": 435
}

Evidence (package doc at flag time)

{
  "dependencies_count": 25,
  "dist": {
    "integrity": "sha512-a2jRPBl+sVpq/JNFRTIzJClgdECMYfDCiPAnRR8slWChf08wm+5eXOMc9hMkG4FQQ6N4VRpfBBH/KHiAwNIMJg==",
    "tarball": "https://registry.npmjs.org/snyk-docker-plugin/-/snyk-docker-plugin-9.9.0.tgz",
    "unpackedSize": 938173
  },
  "dist-tags": {
    "hotfix": "6.13.0-hotfix",
    "latest": "9.9.0",
    "release-9.1.x": "9.1.4"
  },
  "latest_version": "9.9.0",
  "maintainers": [
    {
      "email": "npmjs+snyk-admin@snyk.io",
      "name": "snyk-admin"
    }
  ],
  "num_versions": 435,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/snyk/snyk-docker-plugin.git"
  },
  "scripts": {
    "build": "tsc",
    "build-watch": "tsc -w",
    "debug": "tsc-watch --project tsconfig.json --onSuccess 'node --inspect --inspect-brk .'",
    "format": "prettier --loglevel warn --write '{lib,test}/**/*.ts' && eslint --fix '{lib,test}/**/*.ts'",
    "lint": "run-p --max-parallel=${JOBS:-5} --aggregate-output lint:*",
    "lint:commit": "commitlint --from=HEAD~1",
    "lint:eslint": "eslint \"{lib,test}/**/*.ts\"",
    "lint:prettier": "prettier --check \"{lib,test}/**/*.ts\"",
    "prepare": "npm run build",
    "test": "npm run test-jest",
    "test-jest": "jest --ci --maxWorkers=3 --logHeapUsage --colors",
    "test-jest-windows": "jest --ci --maxWorkers=3 --config test/windows/jest.config.js --logHeapUsage",
    "test:system": "jest --ci --maxWorkers=3 --logHeapUsage --colors --testPathPattern='test/system/'",
    "test:unit": "jest --ci --maxWorkers=3 --logHeapUsage --colors --testPathPattern='test/(lib|unit)/'"
  },
  "signal_details": {
    "mass_publish_burst": "publisher 'CircleCI' pushed 6 packages in the last 15min on npm",
    "publisher_unrecognized": "latest published by 'CircleCI', not in maintainer set"
  },
  "time": {
    "created": "2018-03-01T13:18:19.810Z",
    "modified": "2026-06-04T13:14:00.794Z"
  }
}