npm @decocms/start @6.4.0
score
0.74
high
flagged
2026-06-02 01:05
Signals fired
| signal | weight | rationale |
|---|---|---|
| identity | ||
| maintainer_churn | 1.0 | added: ['vinventura'] |
| content | ||
| bin_added | 0.8 | new bin entry: ['deco-migrate', 'deco-post-cleanup', 'deco-htmx-analyze', 'deco-cf-observability', 'deco-audit-observability'] |
| script_count_spike | 0.5 | scripts count 0 -> 10 |
| topology | ||
| mass_publish_burst | 0.8 | publisher 'GitHub Actions' pushed 1192 packages in the last 15min on npm |
| dependency_added_unknown | 0.6 | 6 new non-watchlisted dep(s): ['@deco-cx/warp-node', '@opentelemetry/api', 'clsx', 'fast-json-patch', 'tailwind-merge'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"camudo",
"crazydevil",
"firstdoit",
"gimenes-decocx",
"jonasjesus"
],
"versions": 158
}
Evidence (package doc at flag time)
{
"dependencies_count": 7,
"dist": {
"integrity": "sha512-CcWZ73nb9+lyw2wcY+RHw6dE6MT2PtCP6hI4+RxIUqqkDeDU1lFMSjN9kF4bZ67x/xaZWjXEoK7VdyOe+gU77Q==",
"tarball": "https://registry.npmjs.org/@decocms/start/-/start-6.4.0.tgz",
"unpackedSize": 3465233
},
"dist-tags": {
"latest": "6.4.0",
"next": "5.2.0-next.1",
"rc": "5.3.0-rc.2"
},
"latest_version": "6.4.0",
"maintainers": [
{
"email": "viktor@deco.cx",
"name": "camudo"
},
{
"email": "gimenes@deco.cx",
"name": "gimenes-decocx"
},
{
"email": "fernandofrizzatti@gmail.com",
"name": "crazydevil"
},
{
"email": "jonasjesus@deco.cx",
"name": "jonasjesus"
},
{
"email": "gadr90@gmail.com",
"name": "firstdoit"
},
{
"email": "vinicius.ventura@decocms.com",
"name": "vinventura"
}
],
"num_versions": 170,
"repository": {
"type": "git",
"url": "git+https://github.com/decocms/deco-start.git"
},
"scripts": {
"build": "tsc",
"check": "bun run typecheck && bun run lint && bun run lint:unused",
"clean": "rm -rf node_modules .cache dist .wrangler/state node_modules/.vite && bun install",
"format": "biome format src/ scripts/",
"format:fix": "biome format --write src/ scripts/",
"lint": "biome check src/ scripts/",
"lint:fix": "biome check --write src/ scripts/",
"lint:unused": "knip",
"test": "vitest run",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"bin_added": "new bin entry: ['deco-migrate', 'deco-post-cleanup', 'deco-htmx-analyze', 'deco-cf-observability', 'deco-audit-observability']",
"dependency_added_unknown": "6 new non-watchlisted dep(s): ['@deco-cx/warp-node', '@opentelemetry/api', 'clsx', 'fast-json-patch', 'tailwind-merge'] ...",
"maintainer_churn": "added: ['vinventura']",
"mass_publish_burst": "publisher 'GitHub Actions' pushed 1192 packages in the last 15min on npm",
"script_count_spike": "scripts count 0 -> 10"
},
"time": {
"created": "2026-03-12T23:02:32.143Z",
"modified": "2026-06-01T17:34:39.487Z"
}
}