npm @ngocsangairvds/vsaf @4.0.7
score
0.7095
high
flagged
2026-05-21 09:10
amplifiers
co-occurring signal pairs that lift the final score
- size_spike + install_script_payload: payload growth alongside install surface (+0.10)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| size_spike | 0.5 | unpackedSize 1139656 -> 9795828 (8.6×) |
| cadence | ||
| rapid_release | 0.8 | 6 versions in last 24h: ['4.0.3', '4.0.4', '4.0.5', '4.0.6', '4.0.7'] |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"ngocsangairvds"
],
"versions": 61
}
Evidence (package doc at flag time)
{
"dependencies_count": 8,
"dist": {
"integrity": "sha512-SfLCsuqCUb4H799OnC1bT++vPrhlDMype9g5Lvt9y/wqwZPhW7Rktfc7GnbmV1NtZVcwTY1atpfhSfWriYTN6w==",
"tarball": "https://registry.npmjs.org/@ngocsangairvds/vsaf/-/vsaf-4.0.7.tgz",
"unpackedSize": 9795828
},
"dist-tags": {
"latest": "4.0.7"
},
"latest_version": "4.0.7",
"maintainers": [
{
"email": "ngocsangairvds@gmail.com",
"name": "ngocsangairvds"
}
],
"num_versions": 64,
"repository": null,
"scripts": {
"build": "npm run build --workspaces",
"lint": "tsc --noEmit",
"postinstall": "node -e \"const fs=require('fs'),p=require('path'),r=p.resolve;const d=r(process.cwd(),'node_modules','@vsaf');fs.mkdirSync(d,{recursive:true});const t=r(d,'core');try{fs.rmSync(t,{recursive:true,force:true})}catch{};fs.symlinkSync(r(process.cwd(),'packages','core','dist'),t,'dir')\"",
"postpack": "mv package.json.bak package.json",
"prepack": "cp package.json package.json.bak && node -e \"const f='package.json',j=JSON.parse(require('fs').readFileSync(f));delete j.workspaces;require('fs').writeFileSync(f,JSON.stringify(j,null,2)+'\\n')\"",
"prepublishOnly": "npm run build && npm test",
"test": "vitest run",
"test:watch": "vitest"
},
"signal_details": {
"_amplifiers": [
"size_spike + install_script_payload: payload growth alongside install surface (+0.10)"
],
"install_script_payload": "install/lifecycle script matches payload regex",
"no_repo": "package.json has no repository field",
"rapid_release": "6 versions in last 24h: ['4.0.3', '4.0.4', '4.0.5', '4.0.6', '4.0.7']",
"size_spike": "unpackedSize 1139656 -> 9795828 (8.6\u00d7)"
},
"time": {
"created": "2026-04-20T03:55:56.671Z",
"modified": "2026-05-21T07:52:30.807Z"
}
}