BEACON

← candidates

npm audit-tools @0.34.42

score
0.8 high
flagged 2026-07-29 12:58
signals by category
cadence 1 topology 1 enrichment 1

maintainers added: —

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 6 versions in last 24h: ['0.34.35', '0.34.38', '0.34.39', '0.34.41', '0.34.42']
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/OhOkThisIsFine/audit-tools.git' also claimed by 3 package(s) under different publishers: ['npm/remediator-lambda', 'npm/auditor-lambda', 'npm/@audit-tools/shared']
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 61d ago but package has 187 versions (expect >= 136d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "wheatiest"
  ],
  "versions": 186
}

Evidence (package doc at flag time)

{
  "dependencies_count": 6,
  "dist": {
    "integrity": "sha512-gcOebInvIgJh7JH5lqY9GM3i2YCBTqeJzlcOGXTmP8znC0Ixlm6TLNUF6xnH8cS7QPxX2KqmxwMaH8Tz1jGa0A==",
    "tarball": "https://registry.npmjs.org/audit-tools/-/audit-tools-0.34.42.tgz",
    "unpackedSize": 10609121
  },
  "dist-tags": {
    "latest": "0.34.42"
  },
  "latest_version": "0.34.42",
  "maintainers": [
    {
      "email": "ethanberlant@gmail.com",
      "name": "wheatiest"
    }
  ],
  "num_versions": 187,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/OhOkThisIsFine/audit-tools.git"
  },
  "scripts": {
    "build": "tsc -p tsconfig.json && node scripts/shared/copy-data-assets.mjs",
    "check": "tsc -p tsconfig.json --noEmit",
    "check:backlog-budget": "node scripts/check-backlog-budget.mjs",
    "check:backlog-index": "node scripts/shared/generate-backlog-index.mjs --check",
    "check:backlog-status": "node scripts/check-backlog-status-tokens.mjs",
    "check:constitutional-doc-paths": "node scripts/shared/generate-constitutional-doc-paths.mjs --check",
    "check:control-bytes": "node scripts/check-control-bytes.mjs",
    "check:deadcode": "knip --no-config-hints",
    "check:doc-code-citations": "node scripts/check-doc-code-citations.mjs",
    "check:doc-links": "node scripts/check-doc-links.mjs",
    "check:doc-manifest": "node scripts/check-doc-manifest.mjs",
    "check:guard-reach": "node scripts/check-guard-reach.mjs",
    "check:handoff-roadmap": "node scripts/shared/generate-handoff-roadmap.mjs --check",
    "check:loop-core-patterns": "node scripts/shared/generate-loop-core-patterns.mjs --check",
    "check:memory-citations": "node scripts/check-memory-citations.mjs",
    "check:nightly-routine-prompt": "node scripts/check-nightly-routine-prompt.mjs",
    "check:philosophy-brief": "node scripts/check-philosophy-brief.mjs",
    "check:tests": "tsc -p tsconfig.test.json",
    "check:version-gates": "node scripts/check-version-gates.mjs",
    "fixtures:auditor-contract": "node scripts/remediate/generate-auditor-contract-fixture.mjs",
    "generate-schemas": "node --import tsx/esm scripts/audit/generate-schemas.mjs",
    "nightly:review": "node scripts/nightly/serve.mjs",
    "pack:smoke": "node scripts/shared/smoke-tarball.mjs",
    "postinstall": "node scripts/postinstall.mjs",
    "prebuild": "node scripts/shared/guard-no-suite-running.mjs",
    "prepack": "npm run build",
    "prepublishOnly": "npm run verify:release",
    "release:major": "node scripts/release-and-publish.mjs major --bump-only",
    "release:major:publish": "node scripts/release-and-publish.mjs major",
    "release:minor": "node scripts/release-and-publish.mjs minor --bump-only",
    "release:minor:publish": "node scripts/release-and-publish.mjs minor",
    "release:patch": "node scripts/release-and-publish.mjs patch --bump-only",
    "release:patch:publish": "node scripts/release-and-publish.mjs patch",
    "smoke:linked-audit-code": "node scripts/audit/smoke-linked-audit-code.mjs",
    "smoke:linked-remediate-code": "node scripts/remediate/smoke-linked-remediate-code.mjs",
    "smoke:packaged-audit-code": "node scripts/audit/smoke-packaged-audit-code.mjs",
    "smoke:packaged-remediate-code": "node scripts/remediate/smoke-packaged-remediate-code.mjs",
    "test": "npm run build && node scripts/shared/run-vitest-gate.mjs",
    "test:doc-contract": "node scripts/shared/run-vitest-gate.mjs tests/audit/release-contract.test.ts tests/audit/file-lock-doc-sync.test.ts tests/audit/host-asset-renderer-drift.test.ts",
    "test:rebaseline-flakes": "node scripts/shared/rebaseline-flakes.mjs",
    "test:single": "npm run build && node scripts/shared/run-vitest-gate.mjs",
    "update-languages": "node scripts/audit/update-languages.mjs",
    "update-models": "node scripts/shared/update-models.mjs",
    "verify:checks": "node scripts/shared/profile-run.mjs verify-checks check:control-bytes check:version-gates check:guard-reach check:loop-core-patterns check:constitutional-doc-paths check:deadcode check:doc-manifest check:doc-links check:doc-code-citations check:philosophy-brief check:nightly-routine-prompt check:handoff-roadmap check:backlog-index check:memory-citations check:backlog-budget check:backlog-status check:tests build verify:hosts verify:remediate-hosts pack:smoke smoke:packaged-audit-code smoke:packaged-remediate-code",
    "verify:guards": "node scripts/shared/run-vitest-gate.mjs --retry=2 --exclude \"**/audit-code-completion.test.ts\" --exclude \"**/audit-code-wrapper.test.ts\" --exclude \"**/audit/next-step.test.ts\" --exclude \"**/seam-host-only-next-step.test.ts\" --exclude \"**/*-e2e.test.*\" --exclude \"**/next-step-implement-dispatch.test.ts\" --exclude \"**/next-step-pipeline-dispatch.test.ts\"",
    "verify:hosts": "node scripts/audit/verify-hosts.mjs",
    "verify:release": "npm run verify:checks && node scripts/shared/run-vitest-gate.mjs && npm run smoke:linked-audit-code && npm run smoke:linked-remediate-code",
    "verify:remediate-hosts": "node scripts/remediate/verify-hosts.mjs"
  },
  "signal_details": {
    "rapid_release": "6 versions in last 24h: ['0.34.35', '0.34.38', '0.34.39', '0.34.41', '0.34.42']",
    "repo_too_new_for_version_history": "claimed repo created 61d ago but package has 187 versions (expect >= 136d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/OhOkThisIsFine/audit-tools.git' also claimed by 3 package(s) under different publishers: ['npm/remediator-lambda', 'npm/auditor-lambda', 'npm/@audit-tools/shared']"
  },
  "time": {
    "created": "2026-06-19T00:13:48.055Z",
    "modified": "2026-07-29T17:58:44.822Z"
  }
}