npm @loadmill/droid-cua @2.16.0
score
0.5422
med
flagged
2026-06-02 00:06
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| publisher_unrecognized | 0.7 | latest published by 'CircleCI', not in maintainer set |
| content | ||
| bin_added | 0.8 | new bin entry: ['droid-cua'] |
| script_count_spike | 0.5 | scripts count 0 -> 15 |
| topology | ||
| dependency_added_unknown | 0.6 | 9 new non-watchlisted dep(s): ['dotenv', 'ink', 'ink-spinner', 'ink-text-input', 'minimist'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"yigall",
"ggur",
"shiranagen",
"idoco"
],
"versions": 27
}
Evidence (package doc at flag time)
{
"dependencies_count": 9,
"dist": {
"integrity": "sha512-uL3zuybqkq79YOaSrqNxOAtS+Ebz2c1z77V+g9vIEC8AG/fJz9ePEOg138hRBVwd1+gKhckIvP84WOz4Ci0pPA==",
"tarball": "https://registry.npmjs.org/@loadmill/droid-cua/-/droid-cua-2.16.0.tgz",
"unpackedSize": 567500
},
"dist-tags": {
"latest": "2.16.0",
"next": "2.10.1-rc.11"
},
"latest_version": "2.16.0",
"maintainers": [
{
"email": "yigal+npm@loadmill.com",
"name": "yigall"
},
{
"email": "gilad@loadmill.com",
"name": "ggur"
},
{
"email": "shira@loadmill.com",
"name": "shiranagen"
},
{
"email": "ido@loadmill.com",
"name": "idoco"
}
],
"num_versions": 30,
"repository": {
"type": "git",
"url": "git+https://github.com/loadmill/droid-cua.git"
},
"scripts": {
"bench": "node scripts/benchmark.js",
"bench:preflight": "node scripts/benchmark-preflight.js",
"bench:report": "node scripts/benchmark-report.js",
"bench:report:web": "node scripts/benchmark-report-web.js",
"bench:run": "tsx index.js --platform android --instructions benchmarks/benchmark.dcua --context benchmarks/context.md --debug",
"build": "tsc",
"clean": "rm -rf build",
"execution:profile": "node scripts/execution-profile.js",
"prepare": "node scripts/install-git-hooks.mjs",
"prepublishOnly": "npm run build",
"start": "tsx index.js",
"test": "node --test unit-tests/*.test.js",
"typecheck": "tsc --noEmit",
"typecheck:all": "npm run typecheck && npm run typecheck:desktop",
"typecheck:desktop": "npm --prefix desktop-app run typecheck"
},
"signal_details": {
"bin_added": "new bin entry: ['droid-cua']",
"dependency_added_unknown": "9 new non-watchlisted dep(s): ['dotenv', 'ink', 'ink-spinner', 'ink-text-input', 'minimist'] ...",
"publisher_unrecognized": "latest published by 'CircleCI', not in maintainer set",
"script_count_spike": "scripts count 0 -> 15"
},
"time": {
"created": "2026-01-19T16:53:59.650Z",
"modified": "2026-05-31T12:43:31.457Z"
}
}