npm @cfxdevkit/executor @2.0.0

score

0.5329 med

flagged 2026-06-16 06:06

signals by category

content 1 topology 2

maintainers added: —

Signals fired

signal	weight	rationale
content
provenance_dropped	0.8	prior version published with SLSA attestation; current version has none
topology
no_repo	0.3	package.json has no repository field
repository_removed	1.0	prior repo 'git+https://github.com/cfxdevkit/devkit.git' no longer in package.json

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "cfxdevkit"
  ],
  "versions": 15
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-1aqaMvnKWgBMp6+OcUUHDIEwaaGcEtpM3vWr4lfz1kFYRb7D3ul+3LCouBmuDyMZfxcX0nmBGNKrfv7PxVEEFg==",
    "tarball": "https://registry.npmjs.org/@cfxdevkit/executor/-/executor-2.0.0.tgz",
    "unpackedSize": 30995
  },
  "dist-tags": {
    "latest": "2.0.0"
  },
  "latest_version": "2.0.0",
  "maintainers": [
    {
      "email": "spcfxda@gmail.com",
      "name": "cfxdevkit"
    }
  ],
  "num_versions": 16,
  "repository": null,
  "scripts": {
    "build": "vite build",
    "clean": "rm -rf dist .vitest coverage",
    "lint": "biome check src",
    "test": "vitest run",
    "test:coverage": "vitest run --coverage",
    "test:watch": "vitest",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "no_repo": "package.json has no repository field",
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "repository_removed": "prior repo 'git+https://github.com/cfxdevkit/devkit.git' no longer in package.json"
  },
  "time": {
    "created": "2026-02-28T19:51:22.844Z",
    "modified": "2026-06-16T10:06:06.316Z"
  }
}