npm @exellix/graph-composer @2.3.1
score
0.6076
med
flagged
2026-06-02 01:18
amplifiers
co-occurring signal pairs that lift the final score
- install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| new_install_script | 1.0 | first time ['postinstall'] present |
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| topology | ||
| mass_publish_burst | 0.8 | publisher 'exellix' pushed 7 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [],
"versions": 0
}
Evidence (package doc at flag time)
{
"dependencies_count": 5,
"dist": {
"integrity": "sha512-OA6jZT0EufTAkV3jo4c41Zsh0sfrgy+Prt+/JBSBxf5tFUY1bDMVUkw6YXCVkfHffpO72F/S2/3/IOEGh+ZsmA==",
"tarball": "https://registry.npmjs.org/@exellix/graph-composer/-/graph-composer-2.3.1.tgz",
"unpackedSize": 394270
},
"dist-tags": {
"latest": "2.3.1"
},
"latest_version": "2.3.1",
"maintainers": [
{
"email": "npm@exellix.com",
"name": "exellix"
}
],
"num_versions": 12,
"repository": {
"type": "git",
"url": "git+https://github.com/woroces/graph-composer.git"
},
"scripts": {
"build": "tsc -p tsconfig.build.json",
"pack:check": "npm pack --dry-run",
"postinstall": "node -e \"const fs=require('fs'),p=require('path'),cp=require('child_process');const s=p.join('node_modules','nx-config2','bin','nx-config2.js'),d=p.join('node_modules','@x12i','env','bin','nx-config2.js');try{if(fs.existsSync(s)&&!fs.existsSync(d))fs.copyFileSync(s,d);}catch(_){}const patch=p.join('node_modules','@exellix','graph-engine','scripts','patch-ai-tasks-xynthesis-export.mjs');if(fs.existsSync(patch))cp.execFileSync(process.execPath,[patch],{stdio:'inherit'});\"",
"prepublishOnly": "npm run build",
"run:example": "x12i-env run --env-file .env -- tsx src/cli.ts",
"start": "x12i-env run --env-file .env -- node dist/cli.js",
"suggest-smoke": "x12i-env run --env-file .env -- tsx scripts/run-suggest-concept-smoke.ts",
"test": "npm run test:unit && npm run test:live",
"test:live": "x12i-env run --env-file .env -- node --import tsx/esm --test test/live/all.ts",
"test:unit": "node --import tsx/esm --test --test-force-exit test/unit/explain-shape.test.ts test/unit/graph-concept-patch.test.ts test/unit/graph-concept-story-parse.test.ts test/unit/review-concept-output-validation.test.ts test/unit/review-concept-catalog-alias.test.ts test/unit/redact-for-log.test.ts test/unit/graph-composer-logging.test.ts test/unit/worker-instructions.test.ts test/unit/catalog-output-validation.test.ts test/unit/catalox-catalog-bridge.test.ts test/unit/ai-task-profile.test.ts test/unit/create-modify-output-validation.test.ts test/unit/task-node-task-variable.test.ts test/unit/canonical-graph-document.test.ts test/unit/graph-engine-bridge.test.ts test/unit/graph-model-layers.test.ts test/unit/example-generation.test.ts",
"typecheck": "tsc --noEmit",
"verify:catalog-live": "x12i-env run --env-file .env -- tsx scripts/verify-catalog-live.ts",
"verify:local": "tsx src/verify-local.ts"
},
"signal_details": {
"_amplifiers": [
"install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)"
],
"install_script_payload": "install/lifecycle script matches payload regex",
"mass_publish_burst": "publisher 'exellix' pushed 7 packages in the last 15min on npm",
"new_install_script": "first time ['postinstall'] present"
},
"time": {
"created": "2026-05-26T16:35:27.866Z",
"modified": "2026-06-01T20:33:20.808Z"
}
}