npm @costrict/csc @4.1.9
score
0.5839
med
flagged
2026-06-02 00:13
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| provenance_dropped | 0.8 | prior version published with SLSA attestation; current version has none |
| topology | ||
| dependency_added_unknown | 0.6 | 4 new non-watchlisted dep(s): ['@anthropic-ai/sandbox-runtime', '@protobufjs/utf8', 'baseline-browser-mapping', 'pngjs'] |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"zgsm"
],
"versions": 27
}
Evidence (package doc at flag time)
{
"dependencies_count": 12,
"dist": {
"integrity": "sha512-+3h5FxB9gLOO/1c6QjwZ96hjtRiBSA0/o3trSiAwUk7hM52H7xrax/lwZ5/DCW1/3OkVAongTwvog9HoojOZrA==",
"tarball": "https://registry.npmjs.org/@costrict/csc/-/csc-4.1.9.tgz",
"unpackedSize": 37004059
},
"dist-tags": {
"beta": "4.0.13-beta.0",
"latest": "4.1.9",
"try-run": "4.0.5-3"
},
"latest_version": "4.1.9",
"maintainers": [
{
"email": "zgsm@sangfor.com.cn",
"name": "zgsm"
}
],
"num_versions": 32,
"repository": {
"type": "git",
"url": "git+https://github.com/y574444354/csc.git"
},
"scripts": {
"build": "bun run build.ts",
"build:binary:all": "bun run build && bun run compile:linux && bun run compile:linux-baseline && bun run compile:linux-musl && bun run compile:linux-musl-baseline && bun run compile:win && bun run compile:win-baseline && bun run compile:mac-arm64 && bun run compile:mac-x64 && bun run compile:mac-x64-baseline",
"build:binary:linux": "bun run build && bun run compile:linux",
"build:binary:linux-baseline": "bun run build && bun run compile:linux-baseline",
"build:binary:linux-musl": "bun run build && bun run compile:linux-musl",
"build:binary:linux-musl-baseline": "bun run build && bun run compile:linux-musl-baseline",
"build:binary:mac": "bun run build && bun run compile:mac-arm64 && bun run compile:mac-x64",
"build:binary:mac-arm64": "bun run build && bun run compile:mac-arm64",
"build:binary:mac-x64": "bun run build && bun run compile:mac-x64",
"build:binary:mac-x64-baseline": "bun run build && bun run compile:mac-x64-baseline",
"build:binary:win": "bun run build && bun run compile:win",
"build:binary:win-baseline": "bun run build && bun run compile:win-baseline",
"build:builtin-review": "bun run scripts/generate-review-builtin.ts",
"build:bun": "bun run build.ts",
"build:vite": "vite build && bun run scripts/post-build.ts",
"build:vite:only": "vite build",
"check:unused": "knip-bun",
"compile:linux": "bun build dist/cli.js --compile --target=bun-linux-x64 --outfile dist/csc-linux-x64",
"compile:linux-baseline": "bun build dist/cli.js --compile --target=bun-linux-x64-baseline --outfile dist/csc-linux-x64-baseline",
"compile:linux-musl": "bun build dist/cli.js --compile --target=bun-linux-x64-musl --outfile dist/csc-linux-x64-musl",
"compile:linux-musl-baseline": "bun build dist/cli.js --compile --target=bun-linux-x64-musl-baseline --outfile dist/csc-linux-x64-musl-baseline",
"compile:mac-arm64": "bun build dist/cli.js --compile --target=bun-darwin-arm64 --outfile dist/csc-darwin-arm64",
"compile:mac-x64": "bun build dist/cli.js --compile --target=bun-darwin-x64 --outfile dist/csc-darwin-x64",
"compile:mac-x64-baseline": "bun build dist/cli.js --compile --target=bun-darwin-x64-baseline --outfile dist/csc-darwin-x64-baseline",
"compile:win": "bun build dist/cli.js --compile --target=bun-windows-x64 --outfile dist/csc-windows-x64.exe",
"compile:win-baseline": "bun build dist/cli.js --compile --target=bun-windows-x64-baseline --outfile dist/csc-windows-x64-baseline.exe",
"dev": "bun run scripts/dev.ts",
"dev:inspect": "bun run scripts/dev-debug.ts",
"docs:dev": "npx mintlify dev",
"format": "biome format --write src/",
"health": "bun run scripts/health-check.ts",
"lint": "biome lint src/",
"lint:fix": "biome lint --fix src/",
"postinstall": "node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs scripts/install-cosknow.mjs",
"prepare": "git config core.hooksPath .githooks",
"prepublishOnly": "bun run build",
"rcs": "bun run scripts/rcs.ts",
"test": "bun test",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"dependency_added_unknown": "4 new non-watchlisted dep(s): ['@anthropic-ai/sandbox-runtime', '@protobufjs/utf8', 'baseline-browser-mapping', 'pngjs']",
"provenance_dropped": "prior version published with SLSA attestation; current version has none"
},
"time": {
"created": "2026-04-10T10:06:54.628Z",
"modified": "2026-06-01T03:30:20.029Z"
}
}