BEACON

← candidates

npm music-metadata @12.3.5

score
0.7243 high
flagged 2026-11-06 01:13
signals by category
content 1 topology 2

maintainers added: —

package profile →

Signals fired

signalweightrationale
content
script_count_spike 0.5 scripts count 20 -> 27
topology
mass_publish_burst 0.8 publisher 'borewit' pushed 5 packages in the last 15min on npm
shared_repo_different_publisher 0.9 repo 'git+https://github.com/Borewit/music-metadata.git' also claimed by 1 package(s) under different publishers: ['npm/@depup/music-metadata']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "borewit"
  ],
  "versions": 309
}

Evidence (package doc at flag time)

{
  "dependencies_count": 10,
  "dist": {
    "integrity": "sha512-U/+Bj30qfT8ZHIRQzdV36X3kxT69fEpHEkRaUuYb4PtwevQHb2uTE4BF10tY9SQZKgeCnIMRnxCF8TX0AOKGEg==",
    "tarball": "https://registry.npmjs.org/music-metadata/-/music-metadata-12.3.5.tgz",
    "unpackedSize": 771550
  },
  "dist-tags": {
    "beta": "10.8.0-beta.3",
    "cjs": "7.14.0",
    "latest": "12.3.5"
  },
  "latest_version": "12.3.5",
  "maintainers": [
    {
      "email": "borewit@xs4all.nl",
      "name": "borewit"
    }
  ],
  "num_versions": 327,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/Borewit/music-metadata.git"
  },
  "scripts": {
    "build": "yarn run build:prod",
    "build:dev": "yarn run clean && yarn compile:dev && yarn run doc-gen",
    "build:prod": "yarn run clean && yarn compile:prod && yarn run doc-gen",
    "build:test": "yarn clean:test && yarn compile-test && yarn compile-src:dev",
    "clean": "yarn clean:test && del-cli 'doc-gen/**/*.js' 'doc-gen/**/*.js.map'",
    "clean:test": "del-cli 'lib/**/*.js' 'lib/**/*.js.map' 'lib/**/*.d.ts' 'test/**/*.js' 'test/**/*.js.map' 'test/**/*.d.ts'",
    "compile-doc": "tsc -p doc-gen",
    "compile-src:dev": "tsc -p lib/tsconfig.json",
    "compile-src:prod": "tsc -p lib/tsconfig.prod.json",
    "compile-test": "tsc -p test",
    "compile:dev": "yarn compile-test && yarn compile-doc && yarn compile-src:dev",
    "compile:prod": "yarn compile-test && yarn compile-doc && yarn compile-src:prod",
    "deps:refresh": "yarn up -R '**' && yarn dedupe",
    "doc-gen": "yarn node doc-gen/gen.js",
    "lint": "yarn run lint:ts && yarn run lint:md",
    "lint:md": "yarn run remark -u remark-preset-lint-consistent .",
    "lint:ts": "biome check",
    "lint:ts:fix": "biome check --write",
    "prepublishOnly": "yarn run build:prod",
    "send-codacy": "c8 report --reporter=text-lcov | codacy-coverage",
    "test": "yarn build:test && yarn test:compiled",
    "test-coverage": "yarn build:test && yarn test-coverage:compiled",
    "test-coverage:compiled": "c8 yarn test:compiled",
    "test:compiled": "mocha --config .mocharc.compiled.json",
    "test:watch": "nodemon --watch lib --watch test --watch tsconfig.json --ext ts,tsx,json --ignore '**/*.d.ts' --exec 'yarn test'",
    "typecheck": "tsc --project ./lib/tsconfig.json --noEmit && tsc --project ./test/tsconfig.json --noEmit",
    "update-biome": "yarn add -D --exact @biomejs/biome && npx @biomejs/biome migrate --write"
  },
  "signal_details": {
    "mass_publish_burst": "publisher 'borewit' pushed 5 packages in the last 15min on npm",
    "script_count_spike": "scripts count 20 -> 27",
    "shared_repo_different_publisher": "repo 'git+https://github.com/Borewit/music-metadata.git' also claimed by 1 package(s) under different publishers: ['npm/@depup/music-metadata']"
  },
  "time": {
    "created": "2016-11-15T18:09:35.471Z",
    "modified": "2026-11-05T19:53:36.971Z"
  }
}