BEACON

← candidates

npm @stapel/auth-react @0.12.0

score
0.563 med
flagged 2026-07-28 21:37
signals by category
cadence 1 topology 2 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 3 versions in last 24h: ['0.11.0', '0.11.1', '0.12.0']
topology
dist_tag_anomaly 0.5 dist-tags.latest=0.12.0 but max published is 1.0.0
shared_repo_different_publisher 0.9 repo 'https://github.com/usestapel/stapel-react.git' also claimed by 6 package(s) under different publishers: ['npm/@stapel/eslint-plugin', 'npm/@stapel/image', 'npm/@stapel/profiles-react'] ...
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 25d ago but package has 19 versions (expect >= 76d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "ucsoftworks"
  ],
  "versions": 17
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-98+p8L+V8Aq4cyqioglwuLkmd22PHVxAXk9n7l6YYmtd4i5ohsD2mJkl/OSgnb5btEjaa0J8CS9EwQogyezgIw==",
    "tarball": "https://registry.npmjs.org/@stapel/auth-react/-/auth-react-0.12.0.tgz",
    "unpackedSize": 2249985
  },
  "dist-tags": {
    "latest": "0.12.0"
  },
  "latest_version": "0.12.0",
  "maintainers": [
    {
      "email": "ucsoftworks@gmail.com",
      "name": "ucsoftworks"
    }
  ],
  "num_versions": 19,
  "repository": {
    "directory": "packages/auth-react",
    "type": "git",
    "url": "https://github.com/usestapel/stapel-react.git"
  },
  "scripts": {
    "build": "tsc -p tsconfig.json",
    "lint": "eslint .",
    "size": "size-limit",
    "test": "tsc -p tsconfig.demo.json && vitest run --exclude test/prodBundlePurity.test.ts",
    "test:pack": "vitest run test/prodBundlePurity.test.ts"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=0.12.0 but max published is 1.0.0",
    "rapid_release": "3 versions in last 24h: ['0.11.0', '0.11.1', '0.12.0']",
    "repo_too_new_for_version_history": "claimed repo created 25d ago but package has 19 versions (expect >= 76d for that history)",
    "shared_repo_different_publisher": "repo 'https://github.com/usestapel/stapel-react.git' also claimed by 6 package(s) under different publishers: ['npm/@stapel/eslint-plugin', 'npm/@stapel/image', 'npm/@stapel/profiles-react'] ..."
  },
  "time": {
    "created": "2026-07-05T00:22:11.306Z",
    "modified": "2026-07-29T02:36:52.963Z"
  }
}