npm @azure/keyvault-secrets @4.12.0
score
0.8431
high
flagged
2026-11-06 01:06
signals by category
topology
2
maintainers added: azure-sdk, microsoft-oss-releases, microsoft1es
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| mass_publish_burst | 0.8 | publisher 'microsoft1es' pushed 10 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/Azure/azure-sdk-for-js.git' also claimed by 5 package(s) under different publishers: ['npm/@depup/azure__core-http-compat', 'npm/@depup/azure__cosmos', 'npm/@depup/azure__core-rest-pipeline'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [],
"versions": 0
}
Evidence (package doc at flag time)
{
"dependencies_count": 11,
"dist": {
"integrity": "sha512-OHJBnFBMsZBex5+BddX8POl6W4PxSClpogmJipNMYSG8jZ+dqNNYh0l05LlOgmc+U1sQ1bbPlQR2ywSswtNRMg==",
"tarball": "https://registry.npmjs.org/@azure/keyvault-secrets/-/keyvault-secrets-4.12.0.tgz",
"unpackedSize": 1352611
},
"dist-tags": {
"dev": "4.10.2-alpha.20260306.1",
"latest": "4.12.0"
},
"latest_version": "4.12.0",
"maintainers": [
{
"email": "azure-sdk-npmjs@microsoft.com",
"name": "azure-sdk"
},
{
"email": "npmjs@microsoft.com",
"name": "microsoft1es"
},
{
"email": "microsoft-oss-publishing@microsoft.com",
"name": "microsoft-oss-releases"
}
],
"num_versions": 631,
"repository": {
"directory": "sdk/keyvault/keyvault-secrets",
"type": "git",
"url": "git+https://github.com/Azure/azure-sdk-for-js.git"
},
"scripts": {
"build": "npm run clean && dev-tool run build-package && dev-tool run extract-api",
"build:samples": "echo skipped",
"check-format": "prettier --list-different --config ../../../.prettierrc.json --ignore-path ../../../.prettierignore \"src/**/*.{ts,cts,mts}\" \"test/**/*.{ts,cts,mts}\" \"*.{js,cjs,mjs,json}\" ",
"clean": "rimraf --glob dist dist-browser dist-esm test-dist temp types *.tgz *.log",
"execute:samples": "echo skipped",
"extract-api": "rimraf review && dev-tool run extract-api",
"format": "prettier --write --config ../../../.prettierrc.json --ignore-path ../../../.prettierignore \"src/**/*.{ts,cts,mts}\" \"test/**/*.{ts,cts,mts}\" \"*.{js,cjs,mjs,json}\" ",
"generate:client": "echo skipped",
"lint": "eslint package.json src test",
"lint:fix": "eslint package.json src test --fix --fix-type [problem,suggestion]",
"pack": "pnpm pack 2>&1",
"test": "tsc -b --noEmit && npm run test:node && npm run test:browser",
"test:browser": "echo skipped",
"test:node": "dev-tool run test:vitest",
"update-snippets": "dev-tool run update-snippets"
},
"signal_details": {
"mass_publish_burst": "publisher 'microsoft1es' pushed 10 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/Azure/azure-sdk-for-js.git' also claimed by 5 package(s) under different publishers: ['npm/@depup/azure__core-http-compat', 'npm/@depup/azure__cosmos', 'npm/@depup/azure__core-rest-pipeline'] ..."
},
"time": {
"created": "2019-06-28T22:42:45.972Z",
"modified": "2026-10-27T23:54:32.639Z"
}
}