npm @eightstate/escli @0.20.0
score
0.6023
med
flagged
2026-06-10 00:45
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| size_spike | 0.5 | unpackedSize 1442653 -> 14387103 (10.0×) |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/eight-state/eightstate.git' also claimed by 1 package(s) under different publishers: ['npm/@eightstate/contracts'] |
| enrichment | ||
| repo_doesnt_exist | 1.0 | claimed repo eight-state/eightstate returns 404 on github.com |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"mentallysound"
],
"versions": 14
}
Evidence (package doc at flag time)
{
"dependencies_count": 4,
"dist": {
"integrity": "sha512-MYs+7UiQVaf0EdMrd1+iwtvuPs7Vbx6JdLdOzjTKsgv/8SKxfsOFQod74/izJYIwQCRmwqfKsm636+yFjEYpyA==",
"tarball": "https://registry.npmjs.org/@eightstate/escli/-/escli-0.20.0.tgz",
"unpackedSize": 14387103
},
"dist-tags": {
"latest": "0.20.0"
},
"latest_version": "0.20.0",
"maintainers": [
{
"email": "npm@vincenthopf.com",
"name": "mentallysound"
}
],
"num_versions": 15,
"repository": {
"directory": "cli",
"type": "git",
"url": "git+https://github.com/eight-state/eightstate.git"
},
"scripts": {
"build": "tsc -p tsconfig.json && oclif manifest . && cp oclif.manifest.json dist/oclif.manifest.json && pnpm bundle:dist && chmod +x dist/entry.js && rm -f dist/root-manifest-*.json && node dist/entry.js --describe > dist/.rm-describe.tmp && mv dist/.rm-describe.tmp dist/root-manifest-describe.json && node dist/entry.js --schema > dist/.rm-schema.tmp && mv dist/.rm-schema.tmp dist/root-manifest-schema.json",
"build:binary": "bun scripts/build-binaries.ts",
"bundle:dist": "esbuild src-ts/entry.ts --bundle --outdir=dist --platform=node --format=esm --splitting --target=node20 --log-level=warning --banner:js=\"import {createRequire as __escliCreateRequire} from 'node:module'; const require = __escliCreateRequire(import.meta.url);\"",
"check:no-external-snapshots": "cd .. && bun scripts/check-no-external-snapshots.ts",
"check:prod-symbols": "sh scripts/check-prod-symbols.sh dist/escli-darwin-arm64",
"escli": "bun src-ts/entry.ts",
"lint": "eslint src-ts packages/contracts/src",
"lint:bypass": "eslint tests/lint-fixtures/*.ts",
"lint:bypass:check": "sh -c 'if pnpm lint:bypass >/tmp/escli-lint-bypass.out 2>&1; then cat /tmp/escli-lint-bypass.out; echo expected lint bypass to fail; exit 1; else cat /tmp/escli-lint-bypass.out; bun scripts/check-lint-bypass-output.ts /tmp/escli-lint-bypass.out; fi'",
"test": "vitest run",
"typecheck": "tsc -p tsconfig.json --noEmit",
"verify": "pnpm -r build && pnpm -r typecheck && pnpm typecheck && pnpm lint && pnpm lint:bypass:check && pnpm check:no-external-snapshots && pnpm test && pnpm build && pnpm build:binary && pnpm check:prod-symbols"
},
"signal_details": {
"repo_doesnt_exist": "claimed repo eight-state/eightstate returns 404 on github.com",
"shared_repo_different_publisher": "repo 'git+https://github.com/eight-state/eightstate.git' also claimed by 1 package(s) under different publishers: ['npm/@eightstate/contracts']",
"size_spike": "unpackedSize 1442653 -> 14387103 (10.0\u00d7)"
},
"time": {
"created": "2026-05-22T11:02:39.611Z",
"modified": "2026-06-10T05:45:21.538Z"
}
}