npm create-nexpress @0.1.26

score

0.6064 med

flagged 2026-06-11 02:01

signals by category

content 1 topology 2 enrichment 1

maintainers added: —

Signals fired

signal	weight	rationale
content
bin_added	0.8	new bin entry: ['create-nexpress']
topology
shared_repo_different_publisher	0.9	repo 'git+https://github.com/nexpress-cms/nexpress.git' also claimed by 10 package(s) under different publishers: ['npm/@nexpress/plugin-webhook-relay', 'npm/@nexpress/plugin-sdk', 'npm/@nexpress/oauth-providers'] ...
dependency_added_unknown	0.6	2 new non-watchlisted dep(s): ['picocolors', 'prompts']
enrichment
repo_too_new_for_version_history	0.7	claimed repo created 54d ago but package has 27 versions (expect >= 85d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "hahabsw"
  ],
  "versions": 22
}

Evidence (package doc at flag time)

{
  "dependencies_count": 2,
  "dist": {
    "integrity": "sha512-v57zaWlQjjiMW8EPuzWE/eO+DqEQ0xvxVHRsncuHSRa4Xf3TfNvz7K26447kOsnAvYcocxoObcm6SuIJngyw2g==",
    "tarball": "https://registry.npmjs.org/create-nexpress/-/create-nexpress-0.1.26.tgz",
    "unpackedSize": 72853
  },
  "dist-tags": {
    "latest": "0.1.26"
  },
  "latest_version": "0.1.26",
  "maintainers": [
    {
      "email": "hahabsw@gmail.com",
      "name": "hahabsw"
    }
  ],
  "num_versions": 27,
  "repository": {
    "directory": "packages/cli",
    "type": "git",
    "url": "git+https://github.com/nexpress-cms/nexpress.git"
  },
  "scripts": {
    "build": "tsup",
    "clean": "rm -rf dist",
    "dev": "tsup --watch --no-clean",
    "lint": "eslint . --cache --cache-location node_modules/.cache/eslint",
    "sync-snapshot": "tsx scripts/sync-snapshot.ts",
    "test": "vitest run",
    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.templates.json"
  },
  "signal_details": {
    "bin_added": "new bin entry: ['create-nexpress']",
    "dependency_added_unknown": "2 new non-watchlisted dep(s): ['picocolors', 'prompts']",
    "repo_too_new_for_version_history": "claimed repo created 54d ago but package has 27 versions (expect >= 85d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/nexpress-cms/nexpress.git' also claimed by 10 package(s) under different publishers: ['npm/@nexpress/plugin-webhook-relay', 'npm/@nexpress/plugin-sdk', 'npm/@nexpress/oauth-providers'] ..."
  },
  "time": {
    "created": "2026-05-11T17:02:48.145Z",
    "modified": "2026-06-11T07:01:08.763Z"
  }
}