npm @glodon-aiot/libs @1.6.1
score
0.5333
med
flagged
2026-07-29 03:29
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| dist_tag_anomaly | 0.5 | dist-tags.latest=1.6.1 but max published is 3.6.3-alpha.1 |
| mass_publish_burst | 0.8 | publisher 'gaiot-arn' pushed 5 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"feigy",
"gaiot-arn",
"youyi.sun"
],
"versions": 171
}
Evidence (package doc at flag time)
{
"dependencies_count": 1,
"dist": {
"integrity": "sha512-52S/3ZmKpj3waO+d9tG08jrgTDAEGFfgGEC7eYkE/jIhHbR+vVihHUix4eKsiRdcPu9OICUUNtI+MkeS5mlZ1Q==",
"tarball": "https://registry.npmjs.org/@glodon-aiot/libs/-/libs-1.6.1.tgz",
"unpackedSize": 855076
},
"dist-tags": {
"alpha": "1.6.2-alpha.1",
"beta": "1.5.8-beta.13",
"latest": "1.6.1",
"shapshot": "1.5.6-shapshot.12",
"snapshot": "1.5.6-snapshot.23"
},
"latest_version": "1.6.1",
"maintainers": [
{
"email": "feiguoyou@hotmail.com",
"name": "feigy"
},
{
"email": "1017124510@qq.com",
"name": "gaiot-arn"
},
{
"email": "jzjfsz@126.com",
"name": "youyi.sun"
}
],
"num_versions": 181,
"repository": null,
"scripts": {
"build": "tsc && vite build --mode prod",
"build-storybook": "build-storybook",
"check": "yarn prettier --check .",
"dev": "vite",
"docs": "start-storybook -p 6006",
"lint": "eslint --ext .tsx,.ts --fix ./example -c .eslintrc.js",
"preview": "vite preview",
"start": "vite",
"storybook": "start-storybook -p 6006",
"vpublish:major": "sh ./publish.sh major",
"vpublish:minor": "sh ./publish.sh minor",
"vpublish:patch": "sh ./publish.sh patch",
"vpublish:premajor": "sh ./publish.sh premajor",
"vpublish:preminor": "sh ./publish.sh preminor",
"vpublish:prepatch": "sh ./publish.sh prepatch",
"vpublish:prerelease": "sh ./publish.sh prerelease",
"write": "yarn prettier --write ."
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=1.6.1 but max published is 3.6.3-alpha.1",
"mass_publish_burst": "publisher 'gaiot-arn' pushed 5 packages in the last 15min on npm",
"no_repo": "package.json has no repository field"
},
"time": {
"created": "2025-05-15T03:22:57.968Z",
"modified": "2026-07-29T08:24:22.107Z"
}
}