← candidates

npm vivus-agent @1.1.1

Signals fired

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "vivusai"
  ],
  "versions": 10
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-UxfH4TXnR4q0+q8QpVX6ou8NqJpwlHBl2c4aax6KsuO5ZNcT4OPV5b5zzYe4iCwnbxlJEGdfnHgDdC38+k/VWA==",
    "tarball": "https://registry.npmjs.org/vivus-agent/-/vivus-agent-1.1.1.tgz",
    "unpackedSize": 19313123
  },
  "dist-tags": {
    "latest": "1.1.1"
  },
  "latest_version": "1.1.1",
  "maintainers": [
    {
      "email": "witt@allthingsops.io",
      "name": "vivusai"
    }
  ],
  "num_versions": 11,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/wittyphantom333/claude-code.git"
  },
  "scripts": {
    "audit": "bun audit",
    "build": "bun run build.ts",
    "dev": "bun run src/main.tsx",
    "pack:check": "npm pack --dry-run",
    "prepublishOnly": "bun run build.ts && bun audit --prod || true",
    "release": "npm run release:patch",
    "release:dry": "bun run build.ts && npm publish --dry-run",
    "release:major": "npm whoami && npm version major -m 'release: v%s' && npm publish --access public && git push --follow-tags",
    "release:minor": "npm whoami && npm version minor -m 'release: v%s' && npm publish --access public && git push --follow-tags",
    "release:patch": "npm whoami && npm version patch -m 'release: v%s' && npm publish --access public && git push --follow-tags"
  },
  "signal_details": {
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "repo_doesnt_exist": "claimed repo wittyphantom333/claude-code returns 404 on github.com",
    "repository_url_changed": "'git+https://github.com/wittyphantom333/vivus-code.git' -> 'git+https://github.com/wittyphantom333/claude-code.git'",
    "script_count_spike": "scripts count 5 -> 10"
  },
  "time": {
    "created": "2026-06-05T22:34:42.649Z",
    "modified": "2026-06-14T21:49:53.120Z"
  }
}