BEACON

← candidates

npm @github/copilot-sdk @1.0.28

score
0.784 high
flagged 2026-11-06 01:14
signals by category
identity 1 content 2 topology 2

maintainers added: mackinnonbuck, mattcosta7

package profile →

amplifiers co-occurring signal pairs that lift the final score

Signals fired

signalweightrationale
identity
maintainer_churn 1.0 added: ['mackinnonbuck', 'mattcosta7']
content
script_count_spike 0.5 scripts count 13 -> 23
provenance_dropped 0.8 prior version published with SLSA attestation; current version has none
topology
dist_tag_anomaly 0.5 dist-tags.latest=1.0.28 but max published is 1.0.29-preview.0
repository_url_changed 0.7 'git+https://github.com/github/copilot-sdk.git' -> 'git+https://github.com/github/copilot-agent-runtime.git'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "mxie-github",
    "tidy-dev",
    "croffz",
    "devm33",
    "manuelpuyol",
    "jonrohan",
    "primer-css",
    "gracepark",
    "jibrangarcia",
    "arelia",
    "tylerthedev",
    "smockle",
    "simurai",
    "khiga8",
    "dustin.greif",
    "srt32",
    "githubbot",
    "jfuchs",
    "andrialexandrou",
    "joycezhu",
    "bteng22",
    "dustin.savery",
    "ncalteen",
    "alaingoga",
    "andreiig"
  ],
  "versions": 87
}

Evidence (package doc at flag time)

{
  "dependencies_count": 3,
  "dist": {
    "integrity": "sha512-FCbSH9R0j9Wg2BYRAdurw2rncmXV9YTwdUzL75W561uqm3grSXwcJnYjCpc1nlDCa84lJriFC634Luigg4yqOg==",
    "tarball": "https://registry.npmjs.org/@github/copilot-sdk/-/copilot-sdk-1.0.28.tgz",
    "unpackedSize": 3425191
  },
  "dist-tags": {
    "latest": "1.0.28",
    "prerelease": "1.0.29-preview.10",
    "unstable": "1.0.25-unstable.41779900948.gf482387"
  },
  "latest_version": "1.0.28",
  "maintainers": [
    {
      "email": "mxie@github.com",
      "name": "mxie-github"
    },
    {
      "email": "tidy-dev@github.com",
      "name": "tidy-dev"
    },
    {
      "email": "croffz@outlook.com",
      "name": "croffz"
    },
    {
      "email": "mackinnon.buck@gmail.com",
      "name": "mackinnonbuck"
    },
    {
      "email": "devm33@gmail.com",
      "name": "devm33"
    },
    {
      "email": "manuelpuyol@github.com",
      "name": "manuelpuyol"
    },
    {
      "email": "yes@jonrohan.codes",
      "name": "jonrohan"
    },
    {
      "email": "design-systems@github.com",
      "name": "primer-css"
    },
    {
      "email": "lugraciecy@gmail.com",
      "name": "gracepark"
    },
    {
      "email": "jibrang@github.com",
      "name": "jibrangarcia"
    },
    {
      "email": "arelia.jones@gmail.com",
      "name": "arelia"
    },
    {
      "email": "tylerjdev@github.com",
      "name": "tylerthedev"
    },
    {
      "email": "clay@smockle.com",
      "name": "smockle"
    },
    {
      "email": "sim@simurai.com",
      "name": "simurai"
    },
    {
      "email": "katehiga8@gmail.com",
      "name": "khiga8"
    },
    {
      "email": "simon.taranto@gmail.com",
      "name": "srt32"
    },
    {
      "email": "dgreif+githubbotnpm@github.com",
      "name": "githubbot"
    },
    {
      "email": "jonathan.fuchs@gmail.com",
      "name": "jfuchs"
    },
    {
      "email": "andri.j.alexandrou@gmail.com",
      "name": "andrialexandrou"
    },
    {
      "email": "joycezhu@github.com",
      "name": "joycezhu"
    },
    {
      "email": "bteng22@gmail.com",
      "name": "bteng22"
    },
    {
      "email": "dustin.savery@gmail.com",
      "name": "dustin.savery"
    },
    {
      "email": "ncalteen@github.com",
      "name": "ncalteen"
    },
    {
      "email": "dustin.greif@gmail.com",
      "name": "dustin.greif"
    },
    {
      "email": "alaingoga@gmail.com",
      "name": "alaingoga"
    },
    {
      "email": "matt@mattc.io",
      "name": "mattcosta7"
    },
    {
      "email": "andrei.girip99@gmail.com",
      "name": "andreiig"
    }
  ],
  "num_versions": 210,
  "repository": {
    "directory": "src/sdk/nodejs",
    "type": "git",
    "url": "git+https://github.com/github/copilot-agent-runtime.git"
  },
  "scripts": {
    "auth:refresh": "node ../scripts/npm-auth-refresh.mjs --run",
    "build": "tsx esbuild-copilotsdk-nodejs.ts",
    "clean": "rimraf --glob dist *.tgz",
    "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\" --ignore-path .prettierignore",
    "format:check": "prettier --check \"src/**/*.ts\" \"test/**/*.ts\" --ignore-path .prettierignore",
    "generate": "cd ../scripts/codegen && npm run generate",
    "lint": "eslint \"src/**/*.ts\" \"test/**/*.ts\"",
    "lint:fix": "eslint --fix \"src/**/*.ts\" \"test/**/*.ts\"",
    "pack:release": "npm run verify:dependency-policy && tsx scripts/package-sdk.ts",
    "package": "npm run clean && npm run build && node scripts/set-version.js && npm run pack:release && npm version 0.0.0-dev --no-git-tag-version --allow-same-version",
    "prepare:runtime": "tsx scripts/prepare-runtime.ts",
    "prepublishOnly": "npm run build",
    "release:manifest": "tsx scripts/release-manifest.ts",
    "set:cli-version": "node scripts/set-cli-version.js",
    "test": "vitest run",
    "test:codegen": "vitest run --exclude=\"test/e2e/**\" codegen.test.ts legacy-parameters.test.ts",
    "test:unit": "vitest run --exclude=\"test/e2e/**\"",
    "test:watch": "vitest",
    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
    "update:protocol-version": "tsx scripts/update-protocol-version.ts",
    "vendor:tools": "tsx scripts/vendor-build-tools.ts",
    "verify:dependency-policy": "tsx scripts/verify-dependency-policy.ts",
    "verify:release-packages": "tsx scripts/verify-release-packages.ts"
  },
  "signal_details": {
    "_amplifiers": [
      "repository_url_changed + maintainer_churn: repo ownership claim shifted during identity churn (+0.10)"
    ],
    "dist_tag_anomaly": "dist-tags.latest=1.0.28 but max published is 1.0.29-preview.0",
    "maintainer_churn": "added: ['mackinnonbuck', 'mattcosta7']",
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "repository_url_changed": "'git+https://github.com/github/copilot-sdk.git' -> 'git+https://github.com/github/copilot-agent-runtime.git'",
    "script_count_spike": "scripts count 13 -> 23"
  },
  "time": {
    "created": "2026-01-08T16:40:22.563Z",
    "modified": "2026-11-05T23:23:15.823Z"
  }
}