BEACON

← candidates

npm @compilot/js-sdk @2.235.0

score
0.5333 med
flagged 2026-07-29 07:36
signals by category
topology 3

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
no_repo 0.3 package.json has no repository field
dist_tag_anomaly 0.5 dist-tags.latest=2.235.0 but max published is 2.237.0-dev
mass_publish_burst 0.8 publisher 'markonid' pushed 5 packages in the last 15min on npm

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "markonid",
    "feraudet"
  ],
  "versions": 377
}

Evidence (package doc at flag time)

{
  "dependencies_count": 7,
  "dist": {
    "integrity": "sha512-D4W1weiDY6QaKD+beV6R94/oYN4b6brVg23zApwSX2gfR9YxvtQM6gfNj/yRMWrgvFH1d8UaRnHfc3sChXv0Pw==",
    "tarball": "https://registry.npmjs.org/@compilot/js-sdk/-/js-sdk-2.235.0.tgz",
    "unpackedSize": 155708
  },
  "dist-tags": {
    "atlas-dev": "2.228.0-atlas-dev",
    "dev": "2.237.0-dev",
    "latest": "2.235.0",
    "staging": "2.202.0-staging"
  },
  "latest_version": "2.235.0",
  "maintainers": [
    {
      "email": "marko@nexera.id",
      "name": "markonid"
    },
    {
      "email": "cyril@feraudet.com",
      "name": "feraudet"
    }
  ],
  "num_versions": 378,
  "repository": null,
  "scripts": {
    "build": "preconstruct build && npm run copy-package-json-to-dist",
    "copy-package-json-to-dist": "copyfiles package.json dist/",
    "lint": "eslint .",
    "lint:fix": "pnpm lint --fix",
    "prepare:release": "./scripts/prepare_npm_release.sh",
    "prettier": "prettier 'src/' --check",
    "prettier:fix": "prettier 'src/' --write",
    "publish:public": "pnpm run prepare:release && publish --access=public --no-git-checks --registry https://registry.npmjs.org/",
    "test": "bun test",
    "type-check": "tsc --noEmit"
  },
  "signal_details": {
    "dist_tag_anomaly": "dist-tags.latest=2.235.0 but max published is 2.237.0-dev",
    "mass_publish_burst": "publisher 'markonid' pushed 5 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field"
  },
  "time": {
    "created": "2024-09-18T14:32:10.754Z",
    "modified": "2026-07-29T12:36:49.158Z"
  }
}