npm music-metadata @12.3.5
score
0.7243
high
flagged
2026-11-06 01:13
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| script_count_spike | 0.5 | scripts count 20 -> 27 |
| topology | ||
| mass_publish_burst | 0.8 | publisher 'borewit' pushed 5 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/Borewit/music-metadata.git' also claimed by 1 package(s) under different publishers: ['npm/@depup/music-metadata'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"borewit"
],
"versions": 309
}
Evidence (package doc at flag time)
{
"dependencies_count": 10,
"dist": {
"integrity": "sha512-U/+Bj30qfT8ZHIRQzdV36X3kxT69fEpHEkRaUuYb4PtwevQHb2uTE4BF10tY9SQZKgeCnIMRnxCF8TX0AOKGEg==",
"tarball": "https://registry.npmjs.org/music-metadata/-/music-metadata-12.3.5.tgz",
"unpackedSize": 771550
},
"dist-tags": {
"beta": "10.8.0-beta.3",
"cjs": "7.14.0",
"latest": "12.3.5"
},
"latest_version": "12.3.5",
"maintainers": [
{
"email": "borewit@xs4all.nl",
"name": "borewit"
}
],
"num_versions": 327,
"repository": {
"type": "git",
"url": "git+https://github.com/Borewit/music-metadata.git"
},
"scripts": {
"build": "yarn run build:prod",
"build:dev": "yarn run clean && yarn compile:dev && yarn run doc-gen",
"build:prod": "yarn run clean && yarn compile:prod && yarn run doc-gen",
"build:test": "yarn clean:test && yarn compile-test && yarn compile-src:dev",
"clean": "yarn clean:test && del-cli 'doc-gen/**/*.js' 'doc-gen/**/*.js.map'",
"clean:test": "del-cli 'lib/**/*.js' 'lib/**/*.js.map' 'lib/**/*.d.ts' 'test/**/*.js' 'test/**/*.js.map' 'test/**/*.d.ts'",
"compile-doc": "tsc -p doc-gen",
"compile-src:dev": "tsc -p lib/tsconfig.json",
"compile-src:prod": "tsc -p lib/tsconfig.prod.json",
"compile-test": "tsc -p test",
"compile:dev": "yarn compile-test && yarn compile-doc && yarn compile-src:dev",
"compile:prod": "yarn compile-test && yarn compile-doc && yarn compile-src:prod",
"deps:refresh": "yarn up -R '**' && yarn dedupe",
"doc-gen": "yarn node doc-gen/gen.js",
"lint": "yarn run lint:ts && yarn run lint:md",
"lint:md": "yarn run remark -u remark-preset-lint-consistent .",
"lint:ts": "biome check",
"lint:ts:fix": "biome check --write",
"prepublishOnly": "yarn run build:prod",
"send-codacy": "c8 report --reporter=text-lcov | codacy-coverage",
"test": "yarn build:test && yarn test:compiled",
"test-coverage": "yarn build:test && yarn test-coverage:compiled",
"test-coverage:compiled": "c8 yarn test:compiled",
"test:compiled": "mocha --config .mocharc.compiled.json",
"test:watch": "nodemon --watch lib --watch test --watch tsconfig.json --ext ts,tsx,json --ignore '**/*.d.ts' --exec 'yarn test'",
"typecheck": "tsc --project ./lib/tsconfig.json --noEmit && tsc --project ./test/tsconfig.json --noEmit",
"update-biome": "yarn add -D --exact @biomejs/biome && npx @biomejs/biome migrate --write"
},
"signal_details": {
"mass_publish_burst": "publisher 'borewit' pushed 5 packages in the last 15min on npm",
"script_count_spike": "scripts count 20 -> 27",
"shared_repo_different_publisher": "repo 'git+https://github.com/Borewit/music-metadata.git' also claimed by 1 package(s) under different publishers: ['npm/@depup/music-metadata']"
},
"time": {
"created": "2016-11-15T18:09:35.471Z",
"modified": "2026-11-05T19:53:36.971Z"
}
}