npm openfox @1.6.96
score
0.6
med
flagged
2026-06-08 09:10
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| size_spike | 0.5 | unpackedSize 3220064 -> 12748660 (4.0×) |
| topology | ||
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['shiki'] |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 89d ago but package has 117 versions (expect >= 124d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"nicefox"
],
"versions": 116
}
Evidence (package doc at flag time)
{
"dependencies_count": 35,
"dist": {
"integrity": "sha512-1Qp7GIVh+RDlHCkgIj0wbnRpRc2oRRvVY3vVH2DrYkpVurOxxgrwvZuvsASL/L4jgShNYVfs9nVON6lTHOf4mA==",
"tarball": "https://registry.npmjs.org/openfox/-/openfox-1.6.96.tgz",
"unpackedSize": 12748660
},
"dist-tags": {
"latest": "1.6.96"
},
"latest_version": "1.6.96",
"maintainers": [
{
"email": "conrad@nicefox.net",
"name": "nicefox"
}
],
"num_versions": 117,
"repository": {
"type": "git",
"url": "git+ssh://git@github.com/co-l/openfox.git"
},
"scripts": {
"build": "FORCE_COLOR=1 npm run build:server && FORCE_COLOR=1 npm run build:web",
"build:server": "FORCE_COLOR=1 tsup && mkdir -p dist/command-defaults dist/skill-defaults dist/agent-defaults dist/workflow-defaults && cp src/server/commands/defaults/*.md dist/command-defaults/ && cp src/server/skills/defaults/*.md dist/skill-defaults/ && cp src/server/agents/defaults/*.md dist/agent-defaults/ && cp src/server/workflows/defaults/*.json dist/workflow-defaults/ && cp src/cli/update.sh dist/cli/ && chmod +x dist/cli/update.sh && cp package.json dist/ && cp -r src/server/public dist/server/",
"build:web": "cd web && FORCE_COLOR=1 vite build --outDir ../dist/web",
"check": "npm run typecheck && npm run lint && npm run format && npm run duplicate",
"clean": "rm -rf dist",
"dev": "OPENFOX_DEV=true tsx watch src/cli/dev.ts --no-browser",
"dev:web": "vite --config web/vite.config.ts",
"duplicate": "npm run duplicate:server && npm run duplicate:web",
"duplicate:server": "jscpd src/server/ --ignore '**/*.test.ts' --threshold 0",
"duplicate:web": "jscpd web/src/ --config .jscpd-web.json --threshold 0",
"format": "prettier --check 'src/**/*.ts'",
"format:fix": "prettier --write 'src/**/*.ts'",
"lint": "eslint src/ web/src/",
"lint:fix": "eslint src/ --fix",
"patch": "HUSKY=0 npm version patch",
"prepare": "husky",
"prepublishOnly": "npm run build && npm run test:publish:e2e",
"start": "node dist/cli/index.js",
"start:dev": "node dist/cli/dev.js",
"test": "vitest run --reporter=dot --silent=passed-only && vitest run --reporter=dot --silent=passed-only --config e2e/vitest.config.ts",
"test:cov": "vitest run --reporter=dot --silent=passed-only --coverage && vitest run --reporter=dot --silent=passed-only --config e2e/vitest.config.ts --coverage",
"test:cov:e2e": "vitest run --reporter=dot --silent=passed-only --config e2e/vitest.config.ts --coverage",
"test:cov:unit": "vitest run --reporter=dot --silent=passed-only --coverage",
"test:e2e": "vitest run --reporter=dot --silent=passed-only --config e2e/vitest.config.ts",
"test:playwright": "playwright test --config=e2e-playwright/playwright.config.ts",
"test:playwright:headed": "playwright test --config=e2e-playwright/playwright.config.ts --headed",
"test:playwright:ui": "playwright test --config=e2e-playwright/playwright.config.ts --ui",
"test:publish:e2e": "tsx scripts/run-publish-e2e.ts",
"test:unit": "vitest run --reporter=dot --silent=passed-only",
"typecheck": "npm run typecheck:server && npm run typecheck:web",
"typecheck:server": "tsc --noEmit",
"typecheck:web": "cd web && tsc --noEmit"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['shiki']",
"repo_too_new_for_version_history": "claimed repo created 89d ago but package has 117 versions (expect >= 124d for that history)",
"size_spike": "unpackedSize 3220064 -> 12748660 (4.0\u00d7)"
},
"time": {
"created": "2026-03-27T09:47:19.331Z",
"modified": "2026-06-08T14:10:13.276Z"
}
}