BEACON

← candidates

npm @alexkroman1/aai @1.8.3

score
0.7123 high
flagged 2026-07-28 22:59
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/alexkroman/agent.git' also claimed by 2 package(s) under different publishers: ['npm/@alexkroman1/aai-cli', 'npm/@alexkroman1/aai-ui']
dependency_added_unknown 0.6 17 new non-watchlisted dep(s): ['@ai-sdk/anthropic', '@ai-sdk/google', '@ai-sdk/groq', '@ai-sdk/mistral', '@ai-sdk/openai'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "alexkroman1"
  ],
  "versions": 67
}

Evidence (package doc at flag time)

{
  "dependencies_count": 19,
  "dist": {
    "integrity": "sha512-oLog5AzYUA4LZAaowm/zhxYqmQHkhbJ+A7mrT68BRGyYHCW5U33AX6kzsAzCRWMqsZ1/sBq0pdC++e7wLakexw==",
    "tarball": "https://registry.npmjs.org/@alexkroman1/aai/-/aai-1.8.3.tgz",
    "unpackedSize": 895848
  },
  "dist-tags": {
    "latest": "1.8.3"
  },
  "latest_version": "1.8.3",
  "maintainers": [
    {
      "email": "alex@alexkroman.com",
      "name": "alexkroman1"
    }
  ],
  "num_versions": 68,
  "repository": {
    "directory": "packages/aai",
    "type": "git",
    "url": "git+https://github.com/alexkroman/agent.git"
  },
  "scripts": {
    "build": "tsdown && tsc -p tsconfig.build.json",
    "check:integration": "pnpm run test:integration",
    "lint": "biome check .",
    "test": "vitest run",
    "test:coverage": "vitest run --coverage",
    "test:integration": "VITEST_INCLUDE=host/integration.test.ts,host/pentest.test.ts,host/run-code-sandbox.test.ts vitest run -c ../../vitest.slow.config.ts",
    "typecheck": "tsc --noEmit && tsc -p sdk/tsconfig.json"
  },
  "signal_details": {
    "dependency_added_unknown": "17 new non-watchlisted dep(s): ['@ai-sdk/anthropic', '@ai-sdk/google', '@ai-sdk/groq', '@ai-sdk/mistral', '@ai-sdk/openai'] ...",
    "shared_repo_different_publisher": "repo 'git+https://github.com/alexkroman/agent.git' also claimed by 2 package(s) under different publishers: ['npm/@alexkroman1/aai-cli', 'npm/@alexkroman1/aai-ui']"
  },
  "time": {
    "created": "2026-03-17T22:10:26.878Z",
    "modified": "2026-05-19T17:04:14.297Z"
  }
}