BEACON

← candidates

npm openfox @1.6.96

score
0.6 med
flagged 2026-06-08 09:10
signals by category
content 1 topology 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
content
size_spike 0.5 unpackedSize 3220064 -> 12748660 (4.0×)
topology
dependency_added_unknown 0.6 1 new non-watchlisted dep(s): ['shiki']
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 89d ago but package has 117 versions (expect >= 124d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "nicefox"
  ],
  "versions": 116
}

Evidence (package doc at flag time)

{
  "dependencies_count": 35,
  "dist": {
    "integrity": "sha512-1Qp7GIVh+RDlHCkgIj0wbnRpRc2oRRvVY3vVH2DrYkpVurOxxgrwvZuvsASL/L4jgShNYVfs9nVON6lTHOf4mA==",
    "tarball": "https://registry.npmjs.org/openfox/-/openfox-1.6.96.tgz",
    "unpackedSize": 12748660
  },
  "dist-tags": {
    "latest": "1.6.96"
  },
  "latest_version": "1.6.96",
  "maintainers": [
    {
      "email": "conrad@nicefox.net",
      "name": "nicefox"
    }
  ],
  "num_versions": 117,
  "repository": {
    "type": "git",
    "url": "git+ssh://git@github.com/co-l/openfox.git"
  },
  "scripts": {
    "build": "FORCE_COLOR=1 npm run build:server && FORCE_COLOR=1 npm run build:web",
    "build:server": "FORCE_COLOR=1 tsup && mkdir -p dist/command-defaults dist/skill-defaults dist/agent-defaults dist/workflow-defaults && cp src/server/commands/defaults/*.md dist/command-defaults/ && cp src/server/skills/defaults/*.md dist/skill-defaults/ && cp src/server/agents/defaults/*.md dist/agent-defaults/ && cp src/server/workflows/defaults/*.json dist/workflow-defaults/ && cp src/cli/update.sh dist/cli/ && chmod +x dist/cli/update.sh && cp package.json dist/ && cp -r src/server/public dist/server/",
    "build:web": "cd web && FORCE_COLOR=1 vite build --outDir ../dist/web",
    "check": "npm run typecheck && npm run lint && npm run format && npm run duplicate",
    "clean": "rm -rf dist",
    "dev": "OPENFOX_DEV=true tsx watch src/cli/dev.ts --no-browser",
    "dev:web": "vite --config web/vite.config.ts",
    "duplicate": "npm run duplicate:server && npm run duplicate:web",
    "duplicate:server": "jscpd src/server/ --ignore '**/*.test.ts' --threshold 0",
    "duplicate:web": "jscpd web/src/ --config .jscpd-web.json --threshold 0",
    "format": "prettier --check 'src/**/*.ts'",
    "format:fix": "prettier --write 'src/**/*.ts'",
    "lint": "eslint src/ web/src/",
    "lint:fix": "eslint src/ --fix",
    "patch": "HUSKY=0 npm version patch",
    "prepare": "husky",
    "prepublishOnly": "npm run build && npm run test:publish:e2e",
    "start": "node dist/cli/index.js",
    "start:dev": "node dist/cli/dev.js",
    "test": "vitest run --reporter=dot --silent=passed-only && vitest run --reporter=dot --silent=passed-only --config e2e/vitest.config.ts",
    "test:cov": "vitest run --reporter=dot --silent=passed-only --coverage && vitest run --reporter=dot --silent=passed-only --config e2e/vitest.config.ts --coverage",
    "test:cov:e2e": "vitest run --reporter=dot --silent=passed-only --config e2e/vitest.config.ts --coverage",
    "test:cov:unit": "vitest run --reporter=dot --silent=passed-only --coverage",
    "test:e2e": "vitest run --reporter=dot --silent=passed-only --config e2e/vitest.config.ts",
    "test:playwright": "playwright test --config=e2e-playwright/playwright.config.ts",
    "test:playwright:headed": "playwright test --config=e2e-playwright/playwright.config.ts --headed",
    "test:playwright:ui": "playwright test --config=e2e-playwright/playwright.config.ts --ui",
    "test:publish:e2e": "tsx scripts/run-publish-e2e.ts",
    "test:unit": "vitest run --reporter=dot --silent=passed-only",
    "typecheck": "npm run typecheck:server && npm run typecheck:web",
    "typecheck:server": "tsc --noEmit",
    "typecheck:web": "cd web && tsc --noEmit"
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['shiki']",
    "repo_too_new_for_version_history": "claimed repo created 89d ago but package has 117 versions (expect >= 124d for that history)",
    "size_spike": "unpackedSize 3220064 -> 12748660 (4.0\u00d7)"
  },
  "time": {
    "created": "2026-03-27T09:47:19.331Z",
    "modified": "2026-06-08T14:10:13.276Z"
  }
}