Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| npm | @rspack-debug/browser | 2.1.5 | 0.7144 |
maintainer_churn, shared_repo_different_publisher, size_spike
|
hardfist3 | 2026-07-21 07:05 |
| npm | @cratis/arc.react.mvvm | 20.60.1 | 0.7 |
shared_repo_different_publisher, size_spike
|
2026-07-21 03:54 | |
| npm | lolipop | 2.0.5 | 0.7112 |
no_repo, bin_added, license_changed, size_spike, dependency_added_unknown
|
2026-07-21 01:38 | |
| npm | @optique/discover | 1.2.0 | 0.812 |
shared_repo_different_publisher, bin_added, size_spike
|
2026-07-21 00:46 | |
| npm | @twin.org/node-core | 0.9.0 | 0.7 |
dist_tag_anomaly, mass_publish_burst, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-07-20 23:11 | |
| npm | @crouton-kit/crouter | 0.3.119 | 0.7287 |
new_install_script, repository_url_changed, script_count_spike, size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-07-20 21:33 | |
| npm | @sentropic/h2a | 0.85.19 | 0.8 |
shared_repo_different_publisher, bin_added, size_spike, dependency_added_unknown, repo_too_new_for_version_history
|
2026-07-20 19:14 | |
| npm | @ds-mo/ui | 9.2.1 | 0.7009 |
bin_added, size_spike, dependency_added_unknown, repo_too_new_for_version_history
|
2026-07-20 17:57 | |
| npm | apple-photos-mcp | 2.1.2 | 0.8873 |
new_install_script, install_script_payload, size_spike, repo_too_new_for_version_history
|
2026-07-20 12:54 | |
| npm | @seanyao/roll | 4.721.1 | 0.76 |
new_install_script, dist_tag_anomaly, size_spike, dependency_added_unknown, repo_too_new_for_version_history
|
2026-07-20 12:49 | |
| npm | @xyo-network/xl1-protocol | 4.5.2 | 0.7 |
size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-07-20 11:03 | |
| npm | @blocknote/react | 0.52.0 | 0.7 |
shared_repo_different_publisher, size_spike
|
2026-07-20 10:09 | |
| npm | @trigger.dev/sdk | 4.5.4 | 0.7 |
shared_repo_different_publisher, size_spike
|
2026-07-20 09:21 | |
| npm | @prisma-next/extension-supabase | 0.15.0 | 0.7485 |
maintainer_churn, shared_repo_different_publisher, size_spike
|
sevinf | 2026-07-20 08:57 |
| npm | @webpieces/core-util | 0.4.415 | 0.7333 |
rapid_release, shared_repo_different_publisher, size_spike
|
2026-07-20 08:17 | |
| npm | @vibes.diy/vibe-runtime | 9.4.1 | 0.7667 |
rapid_release, shared_repo_different_publisher, provenance_dropped, size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-07-20 07:55 | |
| npm | @underverse-ui/underverse | 1.0.198 | 0.7667 |
new_install_script, script_count_spike, size_spike
|
2026-07-20 06:15 | |
| npm | @wix/motion | 1.682.0 | 0.8056 |
no_repo, maintainer_churn, dist_tag_anomaly, mass_publish_burst, repository_removed, license_changed, provenance_dropped, size_spike, dependency_added_unknown
|
bryanp-wix | 2026-07-20 06:15 |
| npm | @codingame/monaco-vscode-standalone-json-language-features | 35.0.2 | 0.7 |
shared_repo_different_publisher, size_spike
|
2026-07-20 05:03 | |
| npm | @codingame/monaco-vscode-standalone-html-language-features | 35.0.2 | 0.7 |
shared_repo_different_publisher, size_spike
|
2026-07-20 05:02 | |
| npm | @codingame/monaco-vscode-standalone-css-language-features | 35.0.2 | 0.7 |
shared_repo_different_publisher, size_spike
|
2026-07-20 05:02 | |
| npm | radix-ui | 1.6.3 | 0.7 |
shared_repo_different_publisher, size_spike
|
2026-07-20 00:54 | |
| npm | @syncular/typegen | 0.15.34 | 0.7 |
rapid_release, shared_repo_different_publisher, size_spike, dependency_added_unknown
|
2026-07-19 23:54 | |
| npm | @voyant-travel/framework | 0.50.1 | 0.7 |
rapid_release, shared_repo_different_publisher, size_spike, dependency_added_unknown, repo_too_new_for_version_history
|
2026-07-18 07:00 | |
| npm | @agent-native/core | 0.109.0 | 0.7 |
rapid_release, shared_repo_different_publisher, size_spike, dependency_added_unknown, repo_too_new_for_version_history
|
2026-07-17 18:27 | |
| PyPI | projectreadmegen | 7.0.0 | 0.7414 |
size_spike, rapid_release, superseded_quickly, removed_within_window
|
2026-07-17 10:26 | |
| PyPI | clawagents | 6.17.4 | 0.7 |
size_spike, rapid_release
|
2026-07-16 01:00 | |
| PyPI | workpeg | 0.98.0 | 0.7 |
size_spike, rapid_release
|
2026-07-15 01:20 | |
| npm | @accounter/hashavshevet-mesh | 0.2.12 | 0.7 |
shared_repo_different_publisher, repository_url_changed, size_spike
|
2026-07-13 13:07 | |
| npm | @accounter/payper-mesh | 0.2.12 | 0.7 |
shared_repo_different_publisher, repository_url_changed, size_spike
|
2026-07-13 12:57 | |
| npm | @accounter/green-invoice-graphql | 0.8.6 | 0.7 |
shared_repo_different_publisher, repository_url_changed, size_spike
|
2026-07-13 12:57 | |
| npm | pi-crew | 0.9.34 | 0.76 |
new_install_script, script_count_spike, size_spike, dependency_added_unknown, repo_too_new_for_version_history
|
2026-07-13 10:44 | |
| npm | @takumi-rs/helpers | 2.1.0 | 0.7 |
shared_repo_different_publisher, size_spike
|
2026-07-12 03:19 | |
| npm | @netlify/agent-runner-cli | 1.140.0 | 0.7 |
size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-07-09 16:36 | |
| PyPI | kaggle-environments | 1.32.0 | 0.7 |
size_spike, rapid_release
|
2026-07-08 12:25 | |
| npm | @visulima/vis | 1.0.0 | 0.7272 |
shared_repo_different_publisher, bin_added, size_spike, dependency_added_unknown
|
2026-07-07 10:26 | |
| npm | @visulima/dev-toolbar | 1.0.0 | 0.7251 |
shared_repo_different_publisher, bin_added, size_spike, dependency_added_unknown
|
2026-07-07 04:46 | |
| PyPI | kiss-agent-framework | 2026.7.7 | 0.7 |
size_spike, new_dep_unknown, repo_doesnt_exist
|
2026-07-06 12:40 | |
| PyPI | defirl | 1.3.20 | 0.8 |
size_spike, rapid_release, repo_doesnt_exist
|
2026-07-05 08:06 | |
| PyPI | oaklib | 0.7.0.0 | 0.7833 |
no_repo, size_spike, requires_python_changed, new_dep_unknown, maintainer_email_changed, dormant_burst
|
Chris Mungall <cjm@berkeleybop.org> | 2026-07-02 09:18 |
| PyPI | kiss-agent-framework | 2026.7.3 | 0.8 |
size_spike, rapid_release, repo_doesnt_exist
|
2026-07-02 05:09 | |
| PyPI | tuipet | 0.2.98 | 0.7 |
size_spike, rapid_release, repo_too_new_for_version_history
|
2026-07-01 13:37 | |
| PyPI | appenv | 2026.6.30 | 0.7549 |
size_spike, maintainer_email_changed, dormant_burst
|
Christian Theune <ct@flyingcircus.io> | 2026-06-30 04:31 |
| PyPI | autogen | 0.14.1 | 0.7 |
repository_url_changed, size_spike, requires_python_changed, new_dep_unknown, license_changed, maintainer_email_changed, repo_too_new_for_version_history, attestation_dropped
|
Chi Wang & Qingyun Wu <support@ag2.ai> | 2026-06-29 21:45 |
| PyPI | librefang-sdk | 2026.6.29 | 0.7019 |
size_spike, shared_repo_different_publisher, repo_too_new_for_version_history
|
2026-06-29 02:22 | |
| npm | @twin.org/entity-storage-models | 0.9.0-next.1 | 0.7003 |
provenance_dropped, size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-06-23 01:27 | |
| npm | @redocly/cli | 2.34.0 | 0.7 |
shared_repo_different_publisher, size_spike
|
2026-06-22 11:23 | |
| npm | @keystrokehq/exa | 0.1.5 | 0.7 |
shared_repo_different_publisher, size_spike
|
2026-06-22 10:46 | |
| npm | @keystrokehq/cli | 0.1.4 | 0.8 |
shared_repo_different_publisher, size_spike, repo_doesnt_exist
|
2026-06-22 10:45 | |
| npm | @wcag-checkr/ci | 1.0.0 | 0.7 |
size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-06-21 13:29 |