/**
 * Publishing anomaly detector (v4.2).
 *
 * Detects account-takeover signals and suspicious publishing patterns
 * by analyzing npm registry metadata: maintainer changes, version gaps,
 * script additions, and republish events.
 */
import type { Finding } from "./types.js";
interface NpmVersionMeta {
    version: string;
    publishedAt: string;
    maintainers: string[];
    hasInstallScripts: boolean;
    tarballUrl: string;
}
/**
 * Analyze npm package publishing history for anomalies.
 * Requires pre-fetched version metadata (from npm registry API).
 */
export declare function analyzePublishingAnomalies(packageName: string, versions: NpmVersionMeta[]): Finding[];
/**
 * Extract version metadata from npm registry response.
 * Expects the full package metadata from https://registry.npmjs.org/<package>
 */
export declare function extractVersionMeta(registryData: Record<string, unknown>): NpmVersionMeta[];
export {};
//# sourceMappingURL=publishing-anomaly-detector.d.ts.map