npm @hyperframes/core @0.6.98
score
0.7333
high
flagged
2026-06-15 01:35
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/heygen-com/hyperframes.git' also claimed by 8 package(s) under different publishers: ['npm/@hyperframes/player', 'npm/hyperframes', 'npm/@hyperframes/studio'] ... |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['bpm-detective'] |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 97d ago but package has 217 versions (expect >= 140d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"vancejs",
"miguel.sierra",
"jrusso1020"
],
"versions": 215
}
Evidence (package doc at flag time)
{
"dependencies_count": 6,
"dist": {
"integrity": "sha512-Tgkd5KUXJBDu5YVKthDDESVxgguECIgNKIBwd83FCBiAFVSmAL0MQLEL68y1U/iYX9hgiJjB3wT1P3qm7jMSwA==",
"tarball": "https://registry.npmjs.org/@hyperframes/core/-/core-0.6.98.tgz",
"unpackedSize": 2012145
},
"dist-tags": {
"alpha": "0.6.0-alpha.14",
"latest": "0.6.98"
},
"latest_version": "0.6.98",
"maintainers": [
{
"email": "vance@heygen.com",
"name": "vancejs"
},
{
"email": "miguel.sierra@heygen.com",
"name": "miguel.sierra"
},
{
"email": "jdrusso1020@gmail.com",
"name": "jrusso1020"
}
],
"num_versions": 217,
"repository": {
"directory": "packages/core",
"type": "git",
"url": "git+https://github.com/heygen-com/hyperframes.git"
},
"scripts": {
"build": "bun run build:hyperframes-runtime && tsc",
"build:hyperframe-runtime": "tsx scripts/build-hyperframes-runtime-artifact.ts",
"build:hyperframes-runtime": "tsx scripts/build-hyperframes-runtime-artifact.ts",
"build:hyperframes-runtime:modular": "SANDBOX_RUNTIME_VARIANT=modular tsx scripts/build-hyperframes-runtime-artifact.ts",
"check:hyperframe-html": "tsx scripts/check-hyperframe-static.ts",
"debug:timeline": "tsx scripts/debug-timeline.ts",
"lint:runtime-preview-guards": "tsx scripts/lint-runtime-preview-guards.ts",
"test": "vitest run",
"test:coverage": "vitest run --coverage",
"test:hyperframe-linter": "tsx scripts/test-hyperframe-linter.ts",
"test:hyperframe-runtime-behavior": "tsx scripts/test-hyperframe-runtime-behavior.ts",
"test:hyperframe-runtime-ci": "bun run build:hyperframes-runtime && bun run test:hyperframe-runtime-contract && bun run test:hyperframe-runtime-behavior && bun run test:hyperframe-runtime-seek && bun run test:hyperframe-runtime-duration-guards && bun run test:hyperframe-runtime-parity && bun run test:hyperframe-runtime-security",
"test:hyperframe-runtime-contract": "tsx scripts/test-hyperframe-runtime-contract.ts",
"test:hyperframe-runtime-duration-guards": "tsx scripts/test-hyperframe-runtime-duration-guards.ts",
"test:hyperframe-runtime-parity": "tsx scripts/test-hyperframe-runtime-parity.ts",
"test:hyperframe-runtime-security": "tsx scripts/test-hyperframe-runtime-security.ts",
"test:hyperframe-runtime-seek": "tsx scripts/test-hyperframe-runtime-seek.ts",
"test:watch": "vitest",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['bpm-detective']",
"repo_too_new_for_version_history": "claimed repo created 97d ago but package has 217 versions (expect >= 140d for that history)",
"shared_repo_different_publisher": "repo 'git+https://github.com/heygen-com/hyperframes.git' also claimed by 8 package(s) under different publishers: ['npm/@hyperframes/player', 'npm/hyperframes', 'npm/@hyperframes/studio'] ..."
},
"time": {
"created": "2026-03-23T01:09:05.497Z",
"modified": "2026-06-15T06:35:04.037Z"
}
}