npm @cfxdevkit/contracts @2.0.9

score

0.5458 med

flagged 2026-06-16 06:22

signals by category

topology 3 enrichment 1

maintainers added: —

Signals fired

signal	weight	rationale
topology
shared_repo_different_publisher	0.9	repo 'git+https://github.com/cfxdevkit/framework.git' also claimed by 3 package(s) under different publishers: ['npm/@cfxdevkit/devnode', 'npm/@cfxdevkit/signer-session', 'npm/@cfxdevkit/wallet']
repository_url_changed	0.7	'git+https://github.com/cfxdevkit/devkit.git' -> 'git+https://github.com/cfxdevkit/framework.git'
dependency_added_unknown	0.6	2 new non-watchlisted dep(s): ['@cfxdevkit/abis', '@cfxdevkit/cdk']
enrichment
repo_too_new_for_version_history	0.7	claimed repo created 41d ago but package has 16 versions (expect >= 72d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "cfxdevkit"
  ],
  "versions": 14
}

Evidence (package doc at flag time)

{
  "dependencies_count": 3,
  "dist": {
    "integrity": "sha512-U7/N+rKPyxuWaFxWG1WkfrEkuLkg/foN5p6/Imjo3bc+Xvtxsqy4YH1Mj6sBhN1j7fnV0WluYpdivhhfisGZjQ==",
    "tarball": "https://registry.npmjs.org/@cfxdevkit/contracts/-/contracts-2.0.9.tgz",
    "unpackedSize": 116123
  },
  "dist-tags": {
    "latest": "2.0.9"
  },
  "latest_version": "2.0.9",
  "maintainers": [
    {
      "email": "spcfxda@gmail.com",
      "name": "cfxdevkit"
    }
  ],
  "num_versions": 16,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/cfxdevkit/framework.git"
  },
  "scripts": {
    "build": "vite build",
    "clean": "rm -rf dist .vitest coverage",
    "lint": "biome check src",
    "test": "vitest run",
    "test:coverage": "vitest run --coverage",
    "test:watch": "vitest",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "dependency_added_unknown": "2 new non-watchlisted dep(s): ['@cfxdevkit/abis', '@cfxdevkit/cdk']",
    "repo_too_new_for_version_history": "claimed repo created 41d ago but package has 16 versions (expect >= 72d for that history)",
    "repository_url_changed": "'git+https://github.com/cfxdevkit/devkit.git' -> 'git+https://github.com/cfxdevkit/framework.git'",
    "shared_repo_different_publisher": "repo 'git+https://github.com/cfxdevkit/framework.git' also claimed by 3 package(s) under different publishers: ['npm/@cfxdevkit/devnode', 'npm/@cfxdevkit/signer-session', 'npm/@cfxdevkit/wallet']"
  },
  "time": {
    "created": "2026-02-28T19:51:08.869Z",
    "modified": "2026-06-16T11:22:02.218Z"
  }
}