BEACON

← candidates

npm healix-mcp @1.2.12

score
0.5302 med
flagged 2026-06-10 03:10
signals by category
content 1 topology 2

maintainers added:

package profile →

amplifiers co-occurring signal pairs that lift the final score

Signals fired

signalweightrationale
content
bin_added 0.8 new bin entry: ['healix-mcp']
topology
no_repo 0.3 package.json has no repository field
dependency_added_unknown 0.6 3 new non-watchlisted dep(s): ['@modelcontextprotocol/sdk', 'parse5', 'wdio-healix-service']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "faisalsalamah"
  ],
  "versions": 7
}

Evidence (package doc at flag time)

{
  "dependencies_count": 3,
  "dist": {
    "integrity": "sha512-9TSO/PtLgbN2LrmzrjVVyrZL/CxaLAvjwEWxhd4G4sj3FnzU6iV+NaZAO9+Gt4+F3lzyeSfQFr68tGGvwAeV+A==",
    "tarball": "https://registry.npmjs.org/healix-mcp/-/healix-mcp-1.2.12.tgz",
    "unpackedSize": 1487435
  },
  "dist-tags": {
    "latest": "1.2.12"
  },
  "latest_version": "1.2.12",
  "maintainers": [
    {
      "email": "faisal.salamah@live.com",
      "name": "faisalsalamah"
    }
  ],
  "num_versions": 8,
  "repository": null,
  "scripts": {
    "build": "rimraf dist && (tsc -p tsconfig.build.json || true) && npx javascript-obfuscator dist --output dist --config .obfuscator.json && node -e \"const fs=require('fs'),p='dist/index.js';if(!/_0x[0-9a-f]{4,}/.test(fs.readFileSync(p,'utf8').slice(0,400)))throw new Error('OBFUSCATION FAILED: '+p+' is plain');console.log('obfuscation verified');\"",
    "clean": "rimraf dist test-dist",
    "test": "npm run test:unit && npm run test:live",
    "test:live": "tsc --project test/tsconfig.json && node test-dist/test/live/mcp-e2e.js",
    "test:unit": "vitest run",
    "test:unit:watch": "vitest"
  },
  "signal_details": {
    "_amplifiers": [
      "bin_added + no_repo: executable added with no upstream source for review (+0.15)"
    ],
    "bin_added": "new bin entry: ['healix-mcp']",
    "dependency_added_unknown": "3 new non-watchlisted dep(s): ['@modelcontextprotocol/sdk', 'parse5', 'wdio-healix-service']",
    "no_repo": "package.json has no repository field"
  },
  "time": {
    "created": "2026-05-05T13:48:15.249Z",
    "modified": "2026-06-10T08:10:15.557Z"
  }
}