npm @tapsmith/core-linux-arm64 @0.2.0
score
0.6038
med
flagged
2026-06-16 16:51
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| topology | ||
| mass_publish_burst | 0.8 | publisher 'samsmithyeah' pushed 7 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"samsmithyeah"
],
"versions": 7
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-kyfLcdoFa8Dx+CzH2b8p1R0xExX9OOEwuvWsLIh+M8IPuuNkkzcWwuBCNfFeadG8SMbJtrDqqiZma81s/XI8KA==",
"tarball": "https://registry.npmjs.org/@tapsmith/core-linux-arm64/-/core-linux-arm64-0.2.0.tgz",
"unpackedSize": 14540401
},
"dist-tags": {
"latest": "0.2.0"
},
"latest_version": "0.2.0",
"maintainers": [
{
"email": "sam@sammysmith.co.uk",
"name": "samsmithyeah"
}
],
"num_versions": 9,
"repository": {
"directory": "npm-packages/core-linux-arm64",
"type": "git",
"url": "git+https://github.com/samsmithyeah/tapsmith.git"
},
"scripts": {
"postinstall": "node -e \"try{require('fs').chmodSync('tapsmith-core',0o755)}catch(e){console.warn('tapsmith: chmod failed:',e.message)}\""
},
"signal_details": {
"install_script_payload": "install/lifecycle script matches payload regex",
"mass_publish_burst": "publisher 'samsmithyeah' pushed 7 packages in the last 15min on npm"
},
"time": {
"created": "2026-04-24T16:14:49.880Z",
"modified": "2026-06-16T21:35:00.732Z"
}
}