BEACON

← candidates

npm rsshub @1.0.0-master.cfcdc34

score
0.5333 med
flagged 2026-06-06 15:47
signals by category
topology 2 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
dist_tag_anomaly 0.5 dist-tags.latest=1.0.0-master.cfcdc34 but max published is 1.0.0
dependency_added_unknown 0.6 1 new non-watchlisted dep(s): ['patchright']
enrichment
osv_advisory_active 0.5 deps.dev advisories: ['GHSA-2wqw-hr4f-xrhh', 'GHSA-jvxx-v45p-v5vf', 'GHSA-pgjj-866w-fc5c']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "diygod"
  ],
  "versions": 5952
}

Evidence (package doc at flag time)

{
  "dependencies_count": 83,
  "dist": {
    "integrity": "sha512-CDHoV+dKS/z6Fb2yB6xKBOevEhsk1GusuAShwrEz5Shor/lqLQZ8inL4l0MnJGTXmCsWqy77dc7ohaLdYcfxYw==",
    "tarball": "https://registry.npmjs.org/rsshub/-/rsshub-1.0.0-master.cfcdc34.tgz",
    "unpackedSize": 18626615
  },
  "dist-tags": {
    "latest": "1.0.0-master.cfcdc34"
  },
  "latest_version": "1.0.0-master.cfcdc34",
  "maintainers": [
    {
      "email": "diy.d.god@gmail.com",
      "name": "diygod"
    }
  ],
  "num_versions": 5953,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/DIYgod/RSSHub.git"
  },
  "scripts": {
    "build": "npm run build:routes && tsdown",
    "build:docs": "npm run build:routes && tsx scripts/workflow/build-docs.ts",
    "build:lib": "npm run build:routes && tsdown --config ./tsdown-lib.config.ts",
    "build:routes": "cross-env NODE_ENV=dev tsx scripts/workflow/build-routes.ts",
    "build:routes:worker": "cross-env NODE_ENV=dev WORKER_BUILD=true tsx scripts/workflow/build-routes.ts",
    "container-build": "tsdown --config ./tsdown-container.config.ts",
    "container-deploy": "npm run container-build && wrangler deploy --config wrangler-container.toml --containers-rollout=immediate",
    "dev": "cross-env NODE_ENV=dev NODE_OPTIONS='--max-http-header-size=32768' tsx watch --inspect --clear-screen=false lib/index.ts",
    "dev:cache": "cross-env NODE_ENV=production NODE_OPTIONS='--max-http-header-size=32768' tsx watch --clear-screen=false lib/index.ts",
    "eslint": "eslint --cache . --concurrency auto",
    "format": "oxlint --type-aware --fix . && oxfmt .",
    "format:check": "oxlint --type-aware . && oxfmt . --check",
    "format:description": "tsx scripts/workflow/format-description.ts",
    "format:staged": "lint-staged",
    "lint": "oxlint --type-aware .",
    "profiling": "cross-env NODE_ENV=production tsx --prof lib/index.ts",
    "start": "cross-env NODE_ENV=production NODE_OPTIONS='--max-http-header-size=32768' node dist/index.mjs",
    "test": "npm run format:check && npm run vitest:coverage",
    "vercel-build": "npm run build:routes && tsdown --config ./tsdown-vercel.config.ts",
    "vitest": "cross-env NODE_ENV=test vitest",
    "vitest:coverage": "cross-env NODE_ENV=test vitest --coverage.enabled --reporter=junit",
    "vitest:fullroutes": "cross-env NODE_ENV=test FULL_ROUTES_TEST=true vitest --reporter=json --reporter=default --outputFile=\"./assets/build/test-full-routes.json\" routes",
    "vitest:watch": "cross-env NODE_ENV=test vitest --watch",
    "worker-build": "npm run build:routes:worker && tsdown --config ./tsdown-worker.config.ts",
    "worker-deploy": "npm run worker-build && wrangler deploy",
    "worker-dev": "npm run worker-build && wrangler dev",
    "worker-test": "npm run worker-build && vitest run lib/worker.worker.test.ts"
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['patchright']",
    "dist_tag_anomaly": "dist-tags.latest=1.0.0-master.cfcdc34 but max published is 1.0.0",
    "osv_advisory_active": "deps.dev advisories: ['GHSA-2wqw-hr4f-xrhh', 'GHSA-jvxx-v45p-v5vf', 'GHSA-pgjj-866w-fc5c']"
  },
  "time": {
    "created": "2018-08-20T03:25:40.221Z",
    "modified": "2026-06-06T18:45:44.945Z"
  }
}