npm @hermespilot/link @0.7.3

score

0.6517 med

flagged 2026-06-07 21:42

signals by category

content 2 topology 3

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

bin_added + no_repo: executable added with no upstream source for review (+0.15)

Signals fired

signal	weight	rationale
content
bin_added	0.8	new bin entry: ['hermeslink']
script_count_spike	0.5	scripts count 0 -> 11
topology
no_repo	0.3	package.json has no repository field
dist_tag_anomaly	0.5	dist-tags.latest=0.7.3 but max published is 0.7.4-beta.0
dependency_added_unknown	0.6	9 new non-watchlisted dep(s): ['@koa/router', 'better-sqlite3', 'commander', 'koa', 'qrcode'] ...

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "yanghangbin"
  ],
  "versions": 57
}

Evidence (package doc at flag time)

{
  "dependencies_count": 9,
  "dist": {
    "integrity": "sha512-jeLCWOjg4io8yC3/oVpyMJ/ri/7p62U5pmxBJGjtWHx95EhXNLwOm5JiJUzP3Gkafr0/vCq4mdGv40/LXSq1TA==",
    "tarball": "https://registry.npmjs.org/@hermespilot/link/-/link-0.7.3.tgz",
    "unpackedSize": 1293706
  },
  "dist-tags": {
    "beta": "0.7.4-beta.0",
    "latest": "0.7.3"
  },
  "latest_version": "0.7.3",
  "maintainers": [
    {
      "email": "yanghangbin@gmail.com",
      "name": "yanghangbin"
    }
  ],
  "num_versions": 65,
  "repository": null,
  "scripts": {
    "build": "tsup src/cli/index.ts src/http/app.ts --format esm --target node20 --dts --clean",
    "check": "tsc --noEmit",
    "dev": "tsx src/cli/index.ts",
    "pack:dry-run": "npm pack --dry-run",
    "postinstall": "node ./scripts/postinstall.mjs",
    "preinstall": "node ./scripts/check-node-version.mjs",
    "prepack": "npm run build",
    "publish:npm": "npm publish --access public",
    "release": "node ./scripts/release.mjs",
    "start": "node ./dist/cli/index.js",
    "test": "vitest"
  },
  "signal_details": {
    "_amplifiers": [
      "bin_added + no_repo: executable added with no upstream source for review (+0.15)"
    ],
    "bin_added": "new bin entry: ['hermeslink']",
    "dependency_added_unknown": "9 new non-watchlisted dep(s): ['@koa/router', 'better-sqlite3', 'commander', 'koa', 'qrcode'] ...",
    "dist_tag_anomaly": "dist-tags.latest=0.7.3 but max published is 0.7.4-beta.0",
    "no_repo": "package.json has no repository field",
    "script_count_spike": "scripts count 0 -> 11"
  },
  "time": {
    "created": "2026-04-27T07:04:07.240Z",
    "modified": "2026-06-08T02:42:28.054Z"
  }
}