npm @aquaveo/chatbox-core @0.15.3
score
0.5576
med
flagged
2026-06-01 23:26
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| maintainer_churn | 1.0 | added: ['jgimenes'] |
| content | ||
| provenance_dropped | 0.8 | prior version published with SLSA attestation; current version has none |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.15.3 but max published is 0.16.1-beta.0 |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['@google/genai'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"imanmaghami",
"gagelarsen",
"nswain",
"elkingio"
],
"versions": 16
}
Evidence (package doc at flag time)
{
"dependencies_count": 8,
"dist": {
"integrity": "sha512-tQJCQv7UM2vy42niVIM+gf7PrQJE9NvsG9+NWeHWGlXgULTUM4QV8XsedOHTxmpNCD703a3kn8Fqr3GHTqsJoA==",
"tarball": "https://registry.npmjs.org/@aquaveo/chatbox-core/-/chatbox-core-0.15.3.tgz",
"unpackedSize": 2481955
},
"dist-tags": {
"beta": "0.16.1-beta.0",
"latest": "0.15.3"
},
"latest_version": "0.15.3",
"maintainers": [
{
"email": "imaghami@aquaveo.com",
"name": "imanmaghami"
},
{
"email": "glarsen@aquaveo.com",
"name": "gagelarsen"
},
{
"email": "nswain@aquaveo.com",
"name": "nswain"
},
{
"email": "elkingio@protonmail.com",
"name": "elkingio"
},
{
"email": "jgimenes@aquaveo.com",
"name": "jgimenes"
}
],
"num_versions": 23,
"repository": {
"type": "git",
"url": "git+https://github.com/Aquaveo/chatbox-core.git"
},
"scripts": {
"build": "vite build",
"dev": "vite build --watch",
"prepublishOnly": "npm test && npm run build",
"test": "vitest run",
"test:watch": "vitest"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['@google/genai']",
"dist_tag_anomaly": "dist-tags.latest=0.15.3 but max published is 0.16.1-beta.0",
"maintainer_churn": "added: ['jgimenes']",
"provenance_dropped": "prior version published with SLSA attestation; current version has none"
},
"time": {
"created": "2026-05-02T18:50:37.708Z",
"modified": "2026-05-29T02:49:19.943Z"
}
}