BEACON

← candidates

npm @azure/keyvault-secrets @4.12.0

score
0.8431 high
flagged 2026-11-06 01:06
signals by category
topology 2

maintainers added: azure-sdk, microsoft-oss-releases, microsoft1es

package profile →

Signals fired

signalweightrationale
topology
mass_publish_burst 0.8 publisher 'microsoft1es' pushed 10 packages in the last 15min on npm
shared_repo_different_publisher 0.9 repo 'git+https://github.com/Azure/azure-sdk-for-js.git' also claimed by 5 package(s) under different publishers: ['npm/@depup/azure__core-http-compat', 'npm/@depup/azure__cosmos', 'npm/@depup/azure__core-rest-pipeline'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [],
  "versions": 0
}

Evidence (package doc at flag time)

{
  "dependencies_count": 11,
  "dist": {
    "integrity": "sha512-OHJBnFBMsZBex5+BddX8POl6W4PxSClpogmJipNMYSG8jZ+dqNNYh0l05LlOgmc+U1sQ1bbPlQR2ywSswtNRMg==",
    "tarball": "https://registry.npmjs.org/@azure/keyvault-secrets/-/keyvault-secrets-4.12.0.tgz",
    "unpackedSize": 1352611
  },
  "dist-tags": {
    "dev": "4.10.2-alpha.20260306.1",
    "latest": "4.12.0"
  },
  "latest_version": "4.12.0",
  "maintainers": [
    {
      "email": "azure-sdk-npmjs@microsoft.com",
      "name": "azure-sdk"
    },
    {
      "email": "npmjs@microsoft.com",
      "name": "microsoft1es"
    },
    {
      "email": "microsoft-oss-publishing@microsoft.com",
      "name": "microsoft-oss-releases"
    }
  ],
  "num_versions": 631,
  "repository": {
    "directory": "sdk/keyvault/keyvault-secrets",
    "type": "git",
    "url": "git+https://github.com/Azure/azure-sdk-for-js.git"
  },
  "scripts": {
    "build": "npm run clean && dev-tool run build-package && dev-tool run extract-api",
    "build:samples": "echo skipped",
    "check-format": "prettier --list-different --config ../../../.prettierrc.json --ignore-path ../../../.prettierignore \"src/**/*.{ts,cts,mts}\" \"test/**/*.{ts,cts,mts}\" \"*.{js,cjs,mjs,json}\" ",
    "clean": "rimraf --glob dist dist-browser dist-esm test-dist temp types *.tgz *.log",
    "execute:samples": "echo skipped",
    "extract-api": "rimraf review && dev-tool run extract-api",
    "format": "prettier --write --config ../../../.prettierrc.json --ignore-path ../../../.prettierignore \"src/**/*.{ts,cts,mts}\" \"test/**/*.{ts,cts,mts}\" \"*.{js,cjs,mjs,json}\" ",
    "generate:client": "echo skipped",
    "lint": "eslint package.json src test",
    "lint:fix": "eslint package.json src test --fix --fix-type [problem,suggestion]",
    "pack": "pnpm pack 2>&1",
    "test": "tsc -b --noEmit && npm run test:node && npm run test:browser",
    "test:browser": "echo skipped",
    "test:node": "dev-tool run test:vitest",
    "update-snippets": "dev-tool run update-snippets"
  },
  "signal_details": {
    "mass_publish_burst": "publisher 'microsoft1es' pushed 10 packages in the last 15min on npm",
    "shared_repo_different_publisher": "repo 'git+https://github.com/Azure/azure-sdk-for-js.git' also claimed by 5 package(s) under different publishers: ['npm/@depup/azure__core-http-compat', 'npm/@depup/azure__cosmos', 'npm/@depup/azure__core-rest-pipeline'] ..."
  },
  "time": {
    "created": "2019-06-28T22:42:45.972Z",
    "modified": "2026-10-27T23:54:32.639Z"
  }
}