npm @dxos/app-toolkit @0.9.0
score
0.5244
med
flagged
2026-06-15 15:23
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| license_changed | 0.4 | 'MIT' -> 'FSL-1.1-Apache-2.0' |
| size_spike | 0.5 | unpackedSize 49466 -> 1778191 (35.9×) |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/dxos/dxos.git' also claimed by 10 package(s) under different publishers: ['npm/@dxos/protocols', 'npm/@dxos/sql-sqlite', 'npm/@dxos/ui-theme'] ... |
| dependency_added_unknown | 0.6 | 16 new non-watchlisted dep(s): ['@atlaskit/pragmatic-drag-and-drop-hitbox', '@dxos/client', '@dxos/client-protocol', '@dxos/compute', '@dxos/effect'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"richburdon",
"marik_d",
"wittjosiah",
"dxos-bot",
"mykola-vrmchk"
],
"versions": 37
}
Evidence (package doc at flag time)
{
"dependencies_count": 23,
"dist": {
"integrity": "sha512-LRsKfrYX3yZ5Sr4ydFanVBnBT7+ygs59MGyT7+QgnfQPbW5A88YotZiDdEZNUnYMzw2NRYmynKugUAHWOEywjA==",
"tarball": "https://registry.npmjs.org/@dxos/app-toolkit/-/app-toolkit-0.9.0.tgz",
"unpackedSize": 1778191
},
"dist-tags": {
"latest": "0.9.0",
"main": "0.8.4-main.43cb759274",
"next": "0.8.4-staging.60fe92afc8"
},
"latest_version": "0.9.0",
"maintainers": [
{
"email": "rich.burdon@gmail.com",
"name": "richburdon"
},
{
"email": "maretskii@gmail.com",
"name": "marik_d"
},
{
"email": "josiah@witt.life",
"name": "wittjosiah"
},
{
"email": "bot@dxos.org",
"name": "dxos-bot"
},
{
"email": "veremchukmukola@gmail.com",
"name": "mykola-vrmchk"
}
],
"num_versions": 38,
"repository": {
"type": "git",
"url": "git+https://github.com/dxos/dxos.git"
},
"scripts": null,
"signal_details": {
"dependency_added_unknown": "16 new non-watchlisted dep(s): ['@atlaskit/pragmatic-drag-and-drop-hitbox', '@dxos/client', '@dxos/client-protocol', '@dxos/compute', '@dxos/effect'] ...",
"license_changed": "'MIT' -> 'FSL-1.1-Apache-2.0'",
"shared_repo_different_publisher": "repo 'git+https://github.com/dxos/dxos.git' also claimed by 10 package(s) under different publishers: ['npm/@dxos/protocols', 'npm/@dxos/sql-sqlite', 'npm/@dxos/ui-theme'] ...",
"size_spike": "unpackedSize 49466 -> 1778191 (35.9\u00d7)"
},
"time": {
"created": "2026-02-17T22:36:11.640Z",
"modified": "2026-06-15T20:23:32.123Z"
}
}