npm @cleocode/core @2026.6.13
score
0.75
high
flagged
2026-06-10 17:35
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/kryptobaseddev/cleo.git' also claimed by 10 package(s) under different publishers: ['npm/@cleocode/skills', 'npm/@cleocode/mcp-adapter', 'npm/@cleocode/studio'] ... |
| dependency_added_unknown | 0.6 | 2 new non-watchlisted dep(s): ['@earendil-works/pi-agent-core', '@earendil-works/pi-ai'] |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"kryptobaseddev"
],
"versions": 303
}
Evidence (package doc at flag time)
{
"dependencies_count": 48,
"dist": {
"integrity": "sha512-W6tT7Os4BYF2H/Ug6H2X13sGxWtxXgY2Ne1ONZvm4LUE0K7lDAMWjukvi6AufXOt0LQilazWXJIM1qi/Rjqu2w==",
"tarball": "https://registry.npmjs.org/@cleocode/core/-/core-2026.6.13.tgz",
"unpackedSize": 35620520
},
"dist-tags": {
"latest": "2026.6.13"
},
"latest_version": "2026.6.13",
"maintainers": [
{
"email": "keatonhoskins@gmail.com",
"name": "kryptobaseddev"
}
],
"num_versions": 304,
"repository": {
"directory": "packages/core",
"type": "git",
"url": "git+https://github.com/kryptobaseddev/cleo.git"
},
"scripts": {
"build": "tsc",
"postinstall": "node scripts/install-supervisor-binary.mjs",
"test": "vitest run",
"test:integration": "cd ../.. && vitest run --config packages/core/vitest.integration.config.ts",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"dependency_added_unknown": "2 new non-watchlisted dep(s): ['@earendil-works/pi-agent-core', '@earendil-works/pi-ai']",
"shared_repo_different_publisher": "repo 'git+https://github.com/kryptobaseddev/cleo.git' also claimed by 10 package(s) under different publishers: ['npm/@cleocode/skills', 'npm/@cleocode/mcp-adapter', 'npm/@cleocode/studio'] ..."
},
"time": {
"created": "2026-03-19T05:28:20.758Z",
"modified": "2026-06-09T15:23:30.972Z"
}
}