npm homegraph @0.9.10

score

0.5115 med

flagged 2026-06-11 20:34

signals by category

content 3 topology 3

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

bin_added + no_repo: executable added with no upstream source for review (+0.15)
size_spike + bin_added: payload growth alongside install surface (+0.10)

Signals fired

signal	weight	rationale
content
bin_added	0.8	new bin entry: ['homegraph']
script_count_spike	0.5	scripts count 0 -> 10
size_spike	0.5	unpackedSize 69 -> 15073948 (218463.0×)
topology
no_repo	0.3	package.json has no repository field
dist_tag_anomaly	0.5	dist-tags.latest=0.9.10 but max published is 1.0.0
dependency_added_unknown	0.6	10 new non-watchlisted dep(s): ['@clack/prompts', 'commander', 'fast-string-width', 'fast-wrap-ansi', 'ignore'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "fujiaxin"
  ],
  "versions": 1
}

Evidence (package doc at flag time)

{
  "dependencies_count": 10,
  "dist": {
    "integrity": "sha512-PT+oQiTF3RsfMbPL/WzWqB/2HkBhg9Sm/FV5EqFDEsHA/z5MkCytK3dRrjjdLSXpVqPUQC4ZZdWkwx1I3FSkuw==",
    "tarball": "https://registry.npmjs.org/homegraph/-/homegraph-0.9.10.tgz",
    "unpackedSize": 15073948
  },
  "dist-tags": {
    "latest": "0.9.10"
  },
  "latest_version": "0.9.10",
  "maintainers": [
    {
      "email": "3114134323@qq.com",
      "name": "fujiaxin"
    }
  ],
  "num_versions": 3,
  "repository": null,
  "scripts": {
    "build": "tsc && npm run copy-assets && node -e \"require('fs').chmodSync('dist/bin/homegraph.js', 0o755)\"",
    "clean": "node -e \"const fs=require('fs');fs.rmSync('dist',{recursive:true,force:true})\"",
    "cli": "npm run build && node dist/bin/homegraph.js",
    "copy-assets": "node -e \"const fs=require('fs');fs.mkdirSync('dist/db',{recursive:true});fs.copyFileSync('src/db/schema.sql','dist/db/schema.sql');fs.mkdirSync('dist/extraction/wasm',{recursive:true});fs.readdirSync('src/extraction/wasm').filter(f=>f.endsWith('.wasm')).forEach(f=>fs.copyFileSync('src/extraction/wasm/'+f,'dist/extraction/wasm/'+f))\"",
    "dev": "tsc --watch",
    "eval": "npm run build && npx tsx __tests__/evaluation/runner.ts",
    "preuninstall": "node dist/bin/uninstall.js",
    "test": "vitest run",
    "test:eval": "vitest run __tests__/evaluation/",
    "test:watch": "vitest"
  },
  "signal_details": {
    "_amplifiers": [
      "bin_added + no_repo: executable added with no upstream source for review (+0.15)",
      "size_spike + bin_added: payload growth alongside install surface (+0.10)"
    ],
    "bin_added": "new bin entry: ['homegraph']",
    "dependency_added_unknown": "10 new non-watchlisted dep(s): ['@clack/prompts', 'commander', 'fast-string-width', 'fast-wrap-ansi', 'ignore'] ...",
    "dist_tag_anomaly": "dist-tags.latest=0.9.10 but max published is 1.0.0",
    "no_repo": "package.json has no repository field",
    "script_count_spike": "scripts count 0 -> 10",
    "size_spike": "unpackedSize 69 -> 15073948 (218463.0\u00d7)"
  },
  "time": {
    "created": "2026-06-08T01:37:13.377Z",
    "modified": "2026-06-12T01:34:29.809Z"
  }
}