Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| npm | @activeprospect/trustedform-cert-id | 1.1.7 | 0.8405 |
maintainer_churn, dormant_burst, mass_publish_burst
|
matiasdelgado | 2026-07-28 10:23 |
| npm | @deltares/fews-ssd-webcomponent | 1.1.1 | 0.8221 |
publisher_unrecognized, dormant_burst, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-28 08:23 | |
| npm | @deltares/fews-ssd-requests | 1.1.1 | 0.8174 |
publisher_unrecognized, dormant_burst, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-28 08:23 | |
| npm | @goldstack/utils-package-config-generate | 0.3.29 | 0.8139 |
dormant_burst, mass_publish_burst
|
2026-07-28 06:48 | |
| npm | static-file-mapper | 0.3.31 | 0.7664 |
dormant_burst, mass_publish_burst
|
2026-07-28 06:48 | |
| npm | esbuild-ssr-css-modules-plugin | 0.1.33 | 0.77 |
dormant_burst, mass_publish_burst
|
2026-07-28 06:48 | |
| npm | node-css-require | 0.4.31 | 0.7802 |
dormant_burst, mass_publish_burst
|
2026-07-28 06:48 | |
| npm | kourou | 1.3.0 | 0.7033 |
dormant_burst, dist_tag_anomaly
|
2026-07-28 05:55 | |
| npm | vercel-api-js | 1.6.0 | 0.7947 |
dormant_burst, shared_repo_different_publisher, repository_url_changed, dependency_added_unknown
|
2026-07-28 05:41 | |
| npm | kourou | 1.3.0 | 0.7017 |
dormant_burst, dist_tag_anomaly
|
2026-07-28 05:10 | |
| npm | mo-node-tool | 1.0.19 | 0.7248 |
dormant_burst, superseded_quickly, removed_within_window
|
2026-07-28 01:45 | |
| npm | mo-node-tool | 1.0.19 | 0.7314 |
dormant_burst, superseded_quickly, removed_within_window
|
2026-07-28 01:44 | |
| npm | @react-native-community/checkbox | 0.6.0 | 1.0341 |
maintainer_churn, dormant_burst
|
simek | 2026-07-27 21:34 |
| npm | @cloudflare/types | 7.0.1 | 0.9667 |
no_repo, maintainer_churn, dormant_burst
|
cfpriveng | 2026-07-27 16:30 |
| npm | @j2inn/podify | 3.0.4 | 0.7954 |
no_repo, maintainer_churn, dormant_burst
|
agiustij2 | 2026-07-27 16:13 |
| npm | leadconduit-types | 4.23.3 | 0.8333 |
dormant_burst, dist_tag_anomaly, repo_doesnt_exist
|
2026-07-27 13:26 | |
| npm | @activeprospect/trustedform-cert-id | 1.1.7 | 0.8038 |
maintainer_churn, dormant_burst, dependency_added_unknown, repo_doesnt_exist
|
santiago.ferreira | 2026-07-27 13:22 |
| npm | @ludovicm67/webm-tools | 1.0.0 | 0.7232 |
dormant_burst, shared_repo_different_publisher
|
2026-07-27 12:29 | |
| npm | @ludovicm67/mp4-tools | 1.0.0 | 0.7066 |
dormant_burst, shared_repo_different_publisher
|
2026-07-27 12:29 | |
| npm | @lolmath/ui | 8.1.0 | 0.9698 |
publisher_unrecognized, dormant_burst, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-27 11:49 | |
| npm | staying-alive | 1.0.3 | 0.9823 |
publisher_unrecognized, dormant_burst, repository_url_changed, repo_doesnt_exist
|
2026-07-27 10:57 | |
| npm | build-strap | 5.2.1 | 0.746 |
dormant_burst, dist_tag_anomaly
|
2026-07-27 10:44 | |
| npm | build-strap | 5.2.1 | 0.745 |
dormant_burst, dist_tag_anomaly
|
2026-07-27 10:44 | |
| npm | build-strap | 5.2.1 | 0.7429 |
dormant_burst, dist_tag_anomaly
|
2026-07-27 10:41 | |
| npm | build-strap | 5.2.1 | 0.7408 |
dormant_burst, dist_tag_anomaly
|
2026-07-27 10:33 | |
| npm | @builder.io/admin-sdk | 0.0.9 | 0.7577 |
no_repo, maintainer_churn, dormant_burst, dist_tag_anomaly
|
nicholaskipchumba | 2026-07-27 09:28 |
| npm | @livestorm/ui-vue | 2.0.0 | 0.7842 |
maintainer_churn, dormant_burst, script_count_spike, dependency_added_unknown, repo_doesnt_exist
|
supagroova | 2026-07-27 08:41 |
| npm | @orpc/next | 1.14.11 | 0.74 |
dormant_burst, dist_tag_anomaly, shared_repo_different_publisher, repository_url_changed, dependency_added_unknown
|
2026-07-27 08:41 | |
| npm | eslint-config-h5p | 1.0.4 | 0.7806 |
maintainer_churn, dormant_burst
|
akmentinsm | 2026-07-27 07:40 |
| npm | frog | 1.0.0 | 0.82 |
dormant_burst, repository_url_changed, provenance_dropped, dependency_added_unknown, repo_doesnt_exist
|
2026-07-27 01:37 | |
| npm | @zebec-fintech/zic-evm-sdk | 1.1.0 | 0.8709 |
maintainer_churn, dormant_burst, repo_doesnt_exist
|
niten.l | 2026-07-27 00:42 |
| npm | @lolmath/ui | 8.1.0 | 0.9688 |
publisher_unrecognized, dormant_burst, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-26 17:05 | |
| npm | @lolmath/ui | 8.1.0 | 0.9677 |
publisher_unrecognized, dormant_burst, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-26 16:55 | |
| npm | @lolmath/ui | 8.1.0 | 0.9666 |
publisher_unrecognized, dormant_burst, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-26 16:51 | |
| npm | @lolmath/ui | 8.1.0 | 0.9655 |
publisher_unrecognized, dormant_burst, dist_tag_anomaly, shared_repo_different_publisher
|
2026-07-26 16:42 | |
| PyPI | delphi4py | 1.6.0 | 0.8946 |
sdist_only_diff, maintainer_email_changed, dormant_burst, superseded_quickly, removed_within_window, repo_doesnt_exist
|
"Pedro B.P.S. Reis" <preis@fc.ul.pt> | 2026-07-26 11:21 |
| npm | webrtc-streamer | 0.8.17-2-g2bf98a1 | 0.7333 |
typosquat, dormant_burst, dist_tag_anomaly
|
2026-07-26 05:05 | |
| npm | webrtc-streamer | 0.8.17-2-g2bf98a1 | 0.7333 |
typosquat, dormant_burst, dist_tag_anomaly
|
2026-07-26 04:52 | |
| npm | webrtc-streamer | 0.8.17 | 0.85 |
typosquat, dormant_burst
|
2026-07-26 04:45 | |
| npm | webrtc-streamer | 0.8.17 | 0.85 |
typosquat, dormant_burst
|
2026-07-26 04:03 | |
| npm | react-native-moiapps-ui | 0.49.0 | 0.85 |
typosquat, dormant_burst
|
2026-07-26 01:33 | |
| npm | @ngx-canvas/core | 1.0.0 | 0.9356 |
dormant_burst, shared_repo_different_publisher
|
2026-07-25 13:52 | |
| npm | appium-device-farm | 12.0.0 | 0.7667 |
dormant_burst, shared_repo_different_publisher, license_changed
|
2026-07-25 11:53 | |
| npm | do-sync | 6.30.20 | 0.7238 |
dormant_burst, repository_url_changed
|
2026-07-24 23:03 | |
| npm | easy3wmui | 0.0.44 | 0.8642 |
typosquat, dormant_burst, dist_tag_anomaly, repo_doesnt_exist
|
2026-07-24 21:49 | |
| npm | parasol-es | 2.0.0 | 0.779 |
maintainer_churn, dormant_burst, repository_url_changed, dependency_added_unknown
|
jrkasprzyk | 2026-07-24 15:10 |
| PyPI | ema-pytorch | 0.8.0 | 0.7087 |
dormant_burst, typosquat, commit_cadence_mismatch
|
2026-07-24 14:42 | |
| npm | @vaadin-component-factory/vcf-anchor-nav | 3.0.2 | 0.7219 |
dormant_burst, dist_tag_anomaly
|
2026-07-24 13:02 | |
| PyPI | hyperopt | 0.3.0 | 0.7458 |
license_changed, maintainer_email_changed, dormant_burst, attestation_dropped
|
James Bergstra <james.bergstra@gmail.com> | 2026-07-24 08:40 |
| PyPI | deeplc | 4.0.0 | 0.75 |
new_dep_unknown, dormant_burst
|
2026-07-24 04:20 |