npm @pugi/cli @0.1.0-beta.93
score
0.62
med
flagged
2026-06-08 05:17
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| script_count_spike | 0.5 | scripts count 1 -> 11 |
| size_spike | 0.5 | unpackedSize 3837 -> 4566656 (1190.2×) |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.1.0-beta.93 but max published is 1.0.0-alpha.1 |
| dependency_added_unknown | 0.6 | 18 new non-watchlisted dep(s): ['@mozilla/readability', '@pugi/personas', '@pugi/sdk', 'chokidar', 'graphology'] ... |
| enrichment | ||
| repo_doesnt_exist | 1.0 | claimed repo pugi-io/pugi returns 404 on github.com |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"pugi.dev"
],
"versions": 103
}
Evidence (package doc at flag time)
{
"dependencies_count": 20,
"dist": {
"integrity": "sha512-rcNzPJl8DTPvvLLtDY0yti4w2tc4DPU0OsSIv8kmOiUA47Vh/Z4GDimsE+k4pKDcHx/ryAb1sfRPc10OM77YOw==",
"tarball": "https://registry.npmjs.org/@pugi/cli/-/cli-0.1.0-beta.93.tgz",
"unpackedSize": 4566656
},
"dist-tags": {
"beta": "0.1.0-beta.93",
"latest": "0.1.0-beta.93"
},
"latest_version": "0.1.0-beta.93",
"maintainers": [
{
"email": "info@pugi.io",
"name": "pugi.dev"
}
],
"num_versions": 103,
"repository": {
"type": "git",
"url": "git+https://github.com/pugi-io/pugi.git"
},
"scripts": {
"build": "pnpm --filter @pugi/personas --filter @pugi/sdk build && tsc -p tsconfig.json && node scripts/make-bin-executable.mjs",
"check:version-lockstep": "bash ../../scripts/check-version-lockstep.sh",
"dev": "tsx src/index.ts",
"doctor": "tsx src/index.ts doctor --json",
"pack:smoke": "pnpm run check:version-lockstep && node scripts/pack-smoke.mjs",
"release-gate": "node scripts/secret-scanner.mjs",
"scan:tarball": "STAGE=$(mktemp -d) && npm pack --pack-destination \"$STAGE\" >/dev/null && bash ../../tools/scrub/scan-tarball.sh \"$STAGE\"/*.tgz; RC=$?; rm -rf \"$STAGE\"; exit $RC",
"test": "pnpm run check:version-lockstep && pnpm run build && node --test --import tsx 'test/**/*.spec.ts' 'test/**/*.spec.tsx' 'src/**/*.spec.ts' 'src/**/*.spec.tsx'",
"test:integration": "INTEGRATION=1 pnpm run build && node --test --import tsx 'test/**/*.spec.ts' 'test/**/*.spec.tsx' 'src/**/*.spec.ts' 'src/**/*.spec.tsx'",
"typecheck": "pnpm --filter @pugi/personas --filter @pugi/sdk build && tsc -p tsconfig.json --noEmit",
"version:cli": "tsx src/index.ts version"
},
"signal_details": {
"dependency_added_unknown": "18 new non-watchlisted dep(s): ['@mozilla/readability', '@pugi/personas', '@pugi/sdk', 'chokidar', 'graphology'] ...",
"dist_tag_anomaly": "dist-tags.latest=0.1.0-beta.93 but max published is 1.0.0-alpha.1",
"repo_doesnt_exist": "claimed repo pugi-io/pugi returns 404 on github.com",
"script_count_spike": "scripts count 1 -> 11",
"size_spike": "unpackedSize 3837 -> 4566656 (1190.2\u00d7)"
},
"time": {
"created": "2026-05-23T21:07:02.490Z",
"modified": "2026-06-08T10:15:46.629Z"
}
}