muaddib-scanner 2.10.98 → 2.10.100

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +1 -1
  2. package/src/monitor/temporal.js +6 -1
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "muaddib-scanner",
3
- "version": "2.10.98",
3
+ "version": "2.10.100",
4
4
  "description": "Supply-chain threat detection & response for npm & PyPI/Python",
5
5
  "main": "src/index.js",
6
6
  "bin": {
package/src/monitor/temporal.js CHANGED
@@ -286,7 +286,12 @@ async function runTemporalPublishCheck(packageName, dailyAlerts) {
286
286
  }))
287
287
  });
288
288
 
289
- if (dailyAlerts.length < MAX_DAILY_ALERTS) {
289
+ // Only track in dailyAlerts if at least one HIGH+ anomaly.
290
+ // publish_burst (LOW) and rapid_succession (MEDIUM) on monorepos
291
+ // generate thousands of entries/day that never appear in the top
292
+ // suspects and waste RAM. The JSONL alert above still logs everything.
293
+ const hasHighAnomaly = result.anomalies.some(a => a.severity === 'HIGH' || a.severity === 'CRITICAL');
294
+ if (hasHighAnomaly && dailyAlerts.length < MAX_DAILY_ALERTS) {
290
295
  dailyAlerts.push({
291
296
  name: packageName,
292
297
  version: 'N/A',