BEACON

← candidates

npm @gscdump/contracts @0.20.1

score
0.7377 high
flagged 2026-05-20 21:30
signals by category
cadence 1 topology 2 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
cadence
rapid_release 0.8 10 versions in last 24h: ['0.19.4', '0.19.6', '0.19.7', '0.20.0', '0.20.1']
topology
mass_publish_burst 0.8 publisher 'GitHub Actions' pushed 92 packages in the last 15min on npm
shared_repo_different_publisher 0.9 repo 'git+https://github.com/harlan-zw/gscdump.git' also claimed by 10 package(s) under different publishers: ['npm/@gscdump/engine', 'npm/@gscdump/engine-duckdb-wasm', 'npm/@gscdump/cloudflare'] ...
enrichment
repo_doesnt_exist 1.0 claimed repo harlan-zw/gscdump returns 404 on github.com

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "harlan_zw"
  ],
  "versions": 29
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-09/WmiRR9q1x6q7iK7e/WO4xw8f2MHyOrDN+0tvt8i7kJXxj3iEwmViN/h0bDqwmFnMX74ODle8T2SjN28yJnw==",
    "tarball": "https://registry.npmjs.org/@gscdump/contracts/-/contracts-0.20.1.tgz",
    "unpackedSize": 224201
  },
  "dist-tags": {
    "latest": "0.20.1"
  },
  "latest_version": "0.20.1",
  "maintainers": [
    {
      "email": "harlan@harlanzw.com",
      "name": "harlan_zw"
    }
  ],
  "num_versions": 29,
  "repository": {
    "directory": "packages/contracts",
    "type": "git",
    "url": "git+https://github.com/harlan-zw/gscdump.git"
  },
  "scripts": {
    "build": "obuild",
    "dev": "obuild --stub",
    "test": "vitest",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "mass_publish_burst": "publisher 'GitHub Actions' pushed 92 packages in the last 15min on npm",
    "rapid_release": "10 versions in last 24h: ['0.19.4', '0.19.6', '0.19.7', '0.20.0', '0.20.1']",
    "repo_doesnt_exist": "claimed repo harlan-zw/gscdump returns 404 on github.com",
    "shared_repo_different_publisher": "repo 'git+https://github.com/harlan-zw/gscdump.git' also claimed by 10 package(s) under different publishers: ['npm/@gscdump/engine', 'npm/@gscdump/engine-duckdb-wasm', 'npm/@gscdump/cloudflare'] ..."
  },
  "time": {
    "created": "2026-05-11T10:30:31.777Z",
    "modified": "2026-05-21T01:57:41.374Z"
  }
}