npm arc402-cli @1.8.22
score
0.7167
high
flagged
2026-06-11 08:47
amplifiers
co-occurring signal pairs that lift the final score
- bin_added + no_repo: executable added with no upstream source for review (+0.15)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| bin_added | 0.8 | new bin entry: ['arc402'] |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| dependency_added_unknown | 0.6 | 24 new non-watchlisted dep(s): ['@arc402/daemon', '@arc402/sdk', '@coinbase/wallet-sdk', '@types/better-sqlite3', '@types/qrcode'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"arc402"
],
"versions": 136
}
Evidence (package doc at flag time)
{
"dependencies_count": 25,
"dist": {
"integrity": "sha512-t31qtWTWk7vtgsKT1pneKKoiIuvPgMSZh55qotOKEEu67cnZi0UwwkDw2KroFNp8lkCtwqhdhQEZgzIF3wAwsw==",
"tarball": "https://registry.npmjs.org/arc402-cli/-/arc402-cli-1.8.22.tgz",
"unpackedSize": 3708223
},
"dist-tags": {
"latest": "1.8.22",
"next": "1.0.0-rc.1"
},
"latest_version": "1.8.22",
"maintainers": [
{
"email": "arc402xyz@gmail.com",
"name": "arc402"
}
],
"num_versions": 149,
"repository": null,
"scripts": {
"build": "tsc",
"postpack": "node -e \"const fs=require('fs'),path=require('path'); for(const rel of ['workroom','hermes']){ const dst=path.resolve(__dirname,rel); fs.rmSync(dst,{recursive:true,force:true}); console.log('Removed packaged ' + rel + '/ copy'); }\"",
"prepack": "npm run build && node -e \"const fs=require('fs'),path=require('path'); const copies=[['../../workroom','workroom'],['../../hermes','hermes']]; for(const [srcRel,dstRel] of copies){ const src=path.resolve(__dirname,srcRel); const dst=path.resolve(__dirname,dstRel); if(fs.existsSync(src)){ fs.rmSync(dst,{recursive:true,force:true}); fs.cpSync(src,dst,{recursive:true}); console.log('Copied ' + dstRel + '/ into package'); } else { console.warn('WARNING: ' + srcRel + ' not found - ' + dstRel + '/ files will be missing from package'); } }\"",
"prepublishOnly": "npm run prepack",
"test": "node --test test/**/*.test.js"
},
"signal_details": {
"_amplifiers": [
"bin_added + no_repo: executable added with no upstream source for review (+0.15)"
],
"bin_added": "new bin entry: ['arc402']",
"dependency_added_unknown": "24 new non-watchlisted dep(s): ['@arc402/daemon', '@arc402/sdk', '@coinbase/wallet-sdk', '@types/better-sqlite3', '@types/qrcode'] ...",
"no_repo": "package.json has no repository field"
},
"time": {
"created": "2026-03-20T16:21:55.522Z",
"modified": "2026-06-11T13:47:49.947Z"
}
}