npm @settlemint/dalp-cli @2.1.2

score

0.7 high

flagged 2026-05-20 02:05

signals by category

content 1 topology 3

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

bin_added + no_repo: executable added with no upstream source for review (+0.15)

Signals fired

signal	weight	rationale
content
bin_added	0.8	new bin entry: ['dalp']
topology
no_repo	0.3	package.json has no repository field
dist_tag_anomaly	0.5	dist-tags.latest=2.1.2 but max published is 2.1.7-main.22776848622
dependency_added_unknown	0.6	5 new non-watchlisted dep(s): ['@core/validation', '@dalp/auth', '@dalp/dapi-server', '@orpc/client', 'incur']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "roderik",
    "patrickmualaba",
    "janb87"
  ],
  "versions": 1301
}

Evidence (package doc at flag time)

{
  "dependencies_count": 5,
  "dist": {
    "integrity": "sha512-++c89IZBCgccxr+aoDXNP2fZCgMAHHKnfrU5Ye67VgybegHkW/+L/aMVafMj0nYQei2o1iknhfkdEBen/hQiAw==",
    "tarball": "https://registry.npmjs.org/@settlemint/dalp-cli/-/dalp-cli-2.1.2.tgz",
    "unpackedSize": 2624117
  },
  "dist-tags": {
    "latest": "2.1.2",
    "main": "2.1.7-main.26146929337"
  },
  "latest_version": "2.1.2",
  "maintainers": [
    {
      "email": "roderik@settlemint.com",
      "name": "roderik"
    },
    {
      "email": "patrick@settlemint.com",
      "name": "patrickmualaba"
    },
    {
      "email": "janbevers87@gmail.com",
      "name": "janb87"
    }
  ],
  "num_versions": 1302,
  "repository": null,
  "scripts": {
    "attw": "attw --pack .",
    "build": "bun build src/main.ts --outfile dist/dalp.js --target node && echo '#!/usr/bin/env node' | cat - dist/dalp.js > dist/dalp.tmp && mv dist/dalp.tmp dist/dalp.js",
    "prepack": "cp ../../LICENSE .",
    "publint": "publint run --strict",
    "publish": "npm publish --provenance --tag ${TAG:-latest} --access public",
    "test": "vitest run --changed main --project unit",
    "typecheck": "tsgo --noEmit"
  },
  "signal_details": {
    "_amplifiers": [
      "bin_added + no_repo: executable added with no upstream source for review (+0.15)"
    ],
    "bin_added": "new bin entry: ['dalp']",
    "dependency_added_unknown": "5 new non-watchlisted dep(s): ['@core/validation', '@dalp/auth', '@dalp/dapi-server', '@orpc/client', 'incur']",
    "dist_tag_anomaly": "dist-tags.latest=2.1.2 but max published is 2.1.7-main.22776848622",
    "no_repo": "package.json has no repository field"
  },
  "time": {
    "created": "2026-03-06T17:26:44.170Z",
    "modified": "2026-05-20T07:05:12.961Z"
  }
}