npm stripe-cli @0.42.42

score

0.6145 med

flagged 2026-06-01 23:38

signals by category

identity 2 content 1 topology 2 enrichment 1

maintainers added: johno-stripe, tomer-stripe

package profile →

amplifiers co-occurring signal pairs that lift the final score

repository_removed + maintainer_churn: upstream source removed during identity churn (+0.15)

Signals fired

signal	weight	rationale
identity
maintainer_churn	1.0	added: ['johno-stripe', 'tomer-stripe']
maintainer_takeover	1.0	prior all gone ['csauvage'] -> now ['johno-stripe', 'tomer-stripe']
content
new_install_script	1.0	first time ['postinstall'] present
topology
no_repo	0.3	package.json has no repository field
repository_removed	1.0	prior repo 'git+https://github.com/csauvage/stripe-generator.git' no longer in package.json
enrichment
depsdev_no_source_repo	0.5	deps.dev has no SOURCE_REPO link for this version

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "csauvage"
  ],
  "versions": 3
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-8etAQCIMUhvENh6Kp/Rt/lWA45ymwlKWSyGsWu/7HhipGSchUm2mK9UmttQp7R+P76raLiHfY3QNoSRQpFOnfg==",
    "tarball": "https://registry.npmjs.org/stripe-cli/-/stripe-cli-0.42.42.tgz",
    "unpackedSize": 1684
  },
  "dist-tags": {
    "latest": "0.42.42"
  },
  "latest_version": "0.42.42",
  "maintainers": [
    {
      "email": "tomer@stripe.com",
      "name": "tomer-stripe"
    },
    {
      "email": "johno@stripe.com",
      "name": "johno-stripe"
    }
  ],
  "num_versions": 5,
  "repository": null,
  "scripts": {
    "postinstall": "node scripts/postinstall.js"
  },
  "signal_details": {
    "_amplifiers": [
      "repository_removed + maintainer_churn: upstream source removed during identity churn (+0.15)"
    ],
    "depsdev_no_source_repo": "deps.dev has no SOURCE_REPO link for this version",
    "maintainer_churn": "added: ['johno-stripe', 'tomer-stripe']",
    "maintainer_takeover": "prior all gone ['csauvage'] -> now ['johno-stripe', 'tomer-stripe']",
    "new_install_script": "first time ['postinstall'] present",
    "no_repo": "package.json has no repository field",
    "repository_removed": "prior repo 'git+https://github.com/csauvage/stripe-generator.git' no longer in package.json"
  },
  "time": {
    "created": "2013-12-30T19:36:25.532Z",
    "modified": "2026-05-29T15:10:18.624Z"
  }
}