npm @jiangshengdev/codex @0.140.3
score
0.7
high
flagged
2026-06-17 12:50
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.140.3 but max published is 0.140.4-linux-x64 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/jiangshengdev/codex.git' also claimed by 2 package(s) under different publishers: ['npm/@jiangshengdev/codex-responses-api-proxy', 'npm/@jiangshengdev/codex-sdk'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"jiangshengdev"
],
"versions": 138
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-RrxrnbEGuQEM8L5l2+R4mGzvTHo1HD4aeU8PbXPiXa+9R4PnZVwXLXZS+8NfNHIvJhJrB9WYFI+4lZkjbif6/w==",
"tarball": "https://registry.npmjs.org/@jiangshengdev/codex/-/codex-0.140.3.tgz",
"unpackedSize": 797566
},
"dist-tags": {
"darwin-arm64": "0.140.3-darwin-arm64",
"darwin-x64": "0.140.3-darwin-x64",
"latest": "0.140.3",
"linux-arm64": "0.140.3-linux-arm64",
"linux-x64": "0.140.4-linux-x64",
"win32-arm64": "0.140.3-win32-arm64",
"win32-x64": "0.140.3-win32-x64"
},
"latest_version": "0.140.3",
"maintainers": [
{
"email": "jiangshengdev@outlook.com",
"name": "jiangshengdev"
}
],
"num_versions": 138,
"repository": {
"directory": "codex-cli",
"type": "git",
"url": "git+https://github.com/jiangshengdev/codex.git"
},
"scripts": null,
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.140.3 but max published is 0.140.4-linux-x64",
"shared_repo_different_publisher": "repo 'git+https://github.com/jiangshengdev/codex.git' also claimed by 2 package(s) under different publishers: ['npm/@jiangshengdev/codex-responses-api-proxy', 'npm/@jiangshengdev/codex-sdk']"
},
"time": {
"created": "2026-04-26T00:57:16.787Z",
"modified": "2026-06-17T17:50:09.344Z"
}
}