npm @loreai/gateway @0.31.0
score
0.5497
med
flagged
2026-06-15 07:41
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| size_spike | 0.5 | unpackedSize 4743655 -> 16569194 (3.5×) |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/BYK/loreai.git' also claimed by 4 package(s) under different publishers: ['npm/@loreai/opencode', 'npm/@loreai/core', 'npm/@loreai/pi'] ... |
| dependency_added_unknown | 0.6 | 2 new non-watchlisted dep(s): ['@supabase/supabase-js', 'qrcode-terminal'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"byk"
],
"versions": 25
}
Evidence (package doc at flag time)
{
"dependencies_count": 4,
"dist": {
"integrity": "sha512-tTwmiAG0aWyUBCqi9TBoNfb/QmXfJOhkc+3iz92LXF6I3Chg4CYTD7QkJWqMGHIQ3CVOsGMh4gF/577lPDnNWg==",
"tarball": "https://registry.npmjs.org/@loreai/gateway/-/gateway-0.31.0.tgz",
"unpackedSize": 16569194
},
"dist-tags": {
"latest": "0.31.0"
},
"latest_version": "0.31.0",
"maintainers": [
{
"email": "ben@byk.im",
"name": "byk"
}
],
"num_versions": 26,
"repository": {
"directory": "packages/gateway",
"type": "git",
"url": "git+https://github.com/BYK/loreai.git"
},
"scripts": {
"build": "tsx script/build.ts",
"build:binary": "tsx script/build.ts --binary",
"build:binary:sea": "tsx script/build-binary-sea.ts",
"bundle": "tsx script/bundle.ts",
"start": "tsx src/index.ts",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"dependency_added_unknown": "2 new non-watchlisted dep(s): ['@supabase/supabase-js', 'qrcode-terminal']",
"shared_repo_different_publisher": "repo 'git+https://github.com/BYK/loreai.git' also claimed by 4 package(s) under different publishers: ['npm/@loreai/opencode', 'npm/@loreai/core', 'npm/@loreai/pi'] ...",
"size_spike": "unpackedSize 4743655 -> 16569194 (3.5\u00d7)"
},
"time": {
"created": "2026-05-07T22:27:18.797Z",
"modified": "2026-06-15T12:41:28.352Z"
}
}