npm @bytecodealliance/preview2-shim @0.31.0
score
0.8333
high
flagged
2026-11-06 01:06
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| maintainer_churn | 1.0 | added: ['rvolosatovs'] |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/bytecodealliance/jco.git' also claimed by 4 package(s) under different publishers: ['npm/@bytecodealliance/jco', 'npm/@bytecodealliance/rolldown-plugin-jco', 'npm/@bytecodealliance/preview3-shim'] ... |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['@bytecodealliance/jco-node-fs'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"tschneidereit",
"cfallin",
"guybedford",
"vados"
],
"versions": 47
}
Evidence (package doc at flag time)
{
"dependencies_count": 1,
"dist": {
"integrity": "sha512-9Gv4wn/DCz1NOqTZFcPSIko9jsTwmps67QZ6PPytypmmWLSz5AQf3Xn2EjItfudWwSh5d+9EPD3BrNlvqKWNtA==",
"tarball": "https://registry.npmjs.org/@bytecodealliance/preview2-shim/-/preview2-shim-0.31.0.tgz",
"unpackedSize": 607086
},
"dist-tags": {
"latest": "0.31.0"
},
"latest_version": "0.31.0",
"maintainers": [
{
"email": "till@tillschneidereit.net",
"name": "tschneidereit"
},
{
"email": "chris@cfallin.org",
"name": "cfallin"
},
{
"email": "rvolosatovs@riseup.net",
"name": "rvolosatovs"
},
{
"email": "vados@vadosware.io",
"name": "vados"
}
],
"num_versions": 64,
"repository": {
"type": "git",
"url": "git+https://github.com/bytecodealliance/jco.git"
},
"scripts": {
"build": "tsc --project tsconfig.build.json && node scripts/build-worker.mjs",
"build:watch": "tsc --watch",
"fmt": "oxfmt",
"fmt:check": "oxfmt --check",
"lint": "oxlint",
"lint:fix": "oxlint --fix",
"test": "vitest run -c test/vitest.ts",
"test:deno": "deno test --no-check -A test/deno/*.mjs",
"types:check": "tsc --noEmit"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['@bytecodealliance/jco-node-fs']",
"maintainer_churn": "added: ['rvolosatovs']",
"shared_repo_different_publisher": "repo 'git+https://github.com/bytecodealliance/jco.git' also claimed by 4 package(s) under different publishers: ['npm/@bytecodealliance/jco', 'npm/@bytecodealliance/rolldown-plugin-jco', 'npm/@bytecodealliance/preview3-shim'] ..."
},
"time": {
"created": "2023-02-19T23:45:42.703Z",
"modified": "2026-10-27T16:33:33.146Z"
}
}