npm @coopenomics/notifications @2026.5.30-3

score

0.7537 high

flagged 2026-06-01 23:52

signals by category

content 1 topology 3

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

bin_added + no_repo: executable added with no upstream source for review (+0.15)

Signals fired

signal	weight	rationale
content
bin_added	0.8	new bin entry: ['novu-sync']
topology
no_repo	0.3	package.json has no repository field
mass_publish_burst	0.8	publisher 'sysarch' pushed 5 packages in the last 15min on npm
dependency_added_unknown	0.6	5 new non-watchlisted dep(s): ['axios', 'dotenv', 'transliteration', 'zod', 'zod-to-json-schema']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "sysarch"
  ],
  "versions": 76
}

Evidence (package doc at flag time)

{
  "dependencies_count": 5,
  "dist": {
    "integrity": "sha512-uFotnvjGovmklNa0fezzXrixJulw6jaoOw+9K4g1nE0L0NMmU3KDE3oJaAcFDSbkO1Eo0J4wemDI3Eoztxp6BA==",
    "tarball": "https://registry.npmjs.org/@coopenomics/notifications/-/notifications-2026.5.30-3.tgz",
    "unpackedSize": 890341
  },
  "dist-tags": {
    "latest": "2026.5.30-3"
  },
  "latest_version": "2026.5.30-3",
  "maintainers": [
    {
      "email": "dacom.dark.sun@gmail.com",
      "name": "sysarch"
    }
  ],
  "num_versions": 80,
  "repository": null,
  "scripts": {
    "build": "unbuild",
    "clean": "rm -rf dist",
    "dev": "unbuild --watch",
    "sync": "node ./dist/sync/sync-runner.cjs",
    "sync:dev": "node ./dist/sync/sync-runner.cjs --dev",
    "sync:watch": "node ./dist/sync/sync-runner.cjs --dev",
    "test": "vitest run"
  },
  "signal_details": {
    "_amplifiers": [
      "bin_added + no_repo: executable added with no upstream source for review (+0.15)"
    ],
    "bin_added": "new bin entry: ['novu-sync']",
    "dependency_added_unknown": "5 new non-watchlisted dep(s): ['axios', 'dotenv', 'transliteration', 'zod', 'zod-to-json-schema']",
    "mass_publish_burst": "publisher 'sysarch' pushed 5 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field"
  },
  "time": {
    "created": "2025-11-08T07:42:14.118Z",
    "modified": "2026-05-30T08:43:10.424Z"
  }
}