npm @boxes-dev/dvb-runtime @1.0.724
score
0.81
high
flagged
2026-06-02 07:31
amplifiers
co-occurring signal pairs that lift the final score
- bin_added + no_repo: executable added with no upstream source for review (+0.15)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| bin_added | 0.8 | new bin entry: ['dvb', 'dvbd'] |
| cadence | ||
| rapid_release | 0.8 | 7 versions in last 24h: ['1.0.720', '1.0.721', '1.0.722', '1.0.723', '1.0.724'] |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| mass_publish_burst | 0.8 | publisher 'GitHub Actions' pushed 449 packages in the last 15min on npm |
| dependency_added_unknown | 0.6 | 8 new non-watchlisted dep(s): ['@bomb.sh/args', '@bomb.sh/tab', '@clack/core', '@clack/prompts', 'convex'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"nick_ndco"
],
"versions": 546
}
Evidence (package doc at flag time)
{
"dependencies_count": 8,
"dist": {
"integrity": "sha512-7mxeE9x4Hp8k6fe1f156mNs4QQ9vQOA6YnmH9HfmqSSMpyIcHBvwQEJkKjmjR0LY/c3gRX5OlQoff/tE8FgaAQ==",
"tarball": "https://registry.npmjs.org/@boxes-dev/dvb-runtime/-/dvb-runtime-1.0.724.tgz",
"unpackedSize": 40372033
},
"dist-tags": {
"latest": "1.0.724"
},
"latest_version": "1.0.724",
"maintainers": [
{
"email": "nick@nickdrewco.com",
"name": "nick_ndco"
}
],
"num_versions": 564,
"repository": null,
"scripts": {
"build": "tsc -b && npm run build:bundle && npm run build:prompts",
"build:bundle": "node ./scripts/build-bundle.mjs",
"build:prompts": "mkdir -p dist/prompts dist/codex && cp -R src/devbox/commands/init/codex/prompts/* dist/prompts/ && cp -R src/devbox/commands/init/codex/schema/* dist/codex/",
"clean": "rm -rf dist tsconfig.tsbuildinfo",
"lint": "npm run typecheck",
"prepack": "npm run clean && npm run build",
"typecheck": "tsc -b"
},
"signal_details": {
"_amplifiers": [
"bin_added + no_repo: executable added with no upstream source for review (+0.15)"
],
"bin_added": "new bin entry: ['dvb', 'dvbd']",
"dependency_added_unknown": "8 new non-watchlisted dep(s): ['@bomb.sh/args', '@bomb.sh/tab', '@clack/core', '@clack/prompts', 'convex'] ...",
"mass_publish_burst": "publisher 'GitHub Actions' pushed 449 packages in the last 15min on npm",
"no_repo": "package.json has no repository field",
"rapid_release": "7 versions in last 24h: ['1.0.720', '1.0.721', '1.0.722', '1.0.723', '1.0.724']"
},
"time": {
"created": "2026-03-09T19:09:50.467Z",
"modified": "2026-06-02T04:20:12.991Z"
}
}