npm @evalops/maestro @0.10.49
score
0.6093
med
flagged
2026-06-17 21:08
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| script_count_spike | 0.5 | scripts count 149 -> 156 |
| topology | ||
| dependency_added_unknown | 0.6 | 2 new non-watchlisted dep(s): ['@napi-rs/keyring', 'undici'] |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"evalops"
],
"versions": 36
}
Evidence (package doc at flag time)
{
"dependencies_count": 51,
"dist": {
"integrity": "sha512-/D4jkBd1I+bqJSmVZxs1V3HWaPJ7/y8seZYYePQOkBlBCEgQR767Nwk3PgiwNfFae13ugjulsW3j1Yb0heV6bQ==",
"tarball": "https://registry.npmjs.org/@evalops/maestro/-/maestro-0.10.49.tgz",
"unpackedSize": 43822816
},
"dist-tags": {
"latest": "0.10.49"
},
"latest_version": "0.10.49",
"maintainers": [
{
"email": "engineering@evalops.dev",
"name": "evalops"
}
],
"num_versions": 37,
"repository": {
"type": "git",
"url": "git+https://github.com/evalops/maestro.git"
},
"scripts": {
"a2a": "tsx src/cli.ts a2a",
"a2a:codex-bridge": "python3 scripts/codex-a2a-bridge.py",
"a2a:peer": "tsx src/cli.ts a2a",
"build": "node ./scripts/ensure-dir.js ./tmp/tsbuildinfo && tsc -b tsconfig.build.json --force && node ./scripts/bundle-runtime-deps.mjs && node ./scripts/copy-themes.js && node ./scripts/copy-db-migrations.js",
"build:all": "bun run --filter @evalops/contracts build && bun run --filter @evalops/consumer build && bun run --filter @evalops/tui build && bun run --filter @evalops/maestro-web build && bun run build && bun run --filter @evalops/ai build",
"build:release-binary": "node scripts/build-release-binary.mjs",
"bun:check": "bun run bun:lint && bunx tsc -p tsconfig.build.json --noEmit",
"bun:cli": "bun run ./src/cli.ts",
"bun:compile": "npm run build && bun build ./src/cli.ts --target node --packages external --external tree-sitter --external tree-sitter-bash --define MAESTRO_BUNDLE_RUNTIME=true --compile --outfile dist/maestro-bun",
"bun:compile:bytecode": "npm run build && bun build ./src/cli.ts --target node --packages external --external tree-sitter --external tree-sitter-bash --define MAESTRO_BUNDLE_RUNTIME=true --compile --bytecode --outfile dist/maestro-bun-bytecode",
"bun:evals": "bun run build && bun run ./scripts/run-evals.js",
"bun:install": "bun install",
"bun:lint": "bunx biome check . && bun run lint:evals",
"bun:test": "node ./scripts/run-vitest.js --run",
"bun:test:fast": "VITEST_FAST=1 node ./scripts/run-vitest.js --run",
"bun:watch": "bun run --watch ./src/cli.ts",
"check": "npm run lint && npm run check --workspaces --if-present && tsc -p tsconfig.build.json --noEmit",
"check:agent-trajectory-fixtures": "tsx scripts/check-agent-trajectory-fixtures.ts",
"check:agent-trajectory-inspection-fixtures": "tsx scripts/check-agent-trajectory-inspection-fixtures.ts",
"check:agent-trajectory-replay-fixtures": "tsx scripts/check-agent-trajectory-replay-fixtures.ts",
"check:agent-trajectory-scenario-fixtures": "tsx scripts/check-agent-trajectory-scenario-fixtures.ts",
"check:agent-trajectory-score-fixtures": "tsx scripts/check-agent-trajectory-score-fixtures.ts",
"check:app-server-schema": "tsx scripts/app-server-schema-codegen.ts --check",
"check:atomic-write-hygiene": "node scripts/check-atomic-write-hygiene.mjs",
"check:cli-runtime-conformance": "tsx scripts/check-cli-runtime-conformance.ts",
"check:codex-operating-layer": "node scripts/check-codex-operating-layer-conformance.mjs",
"check:codex-parity": "node scripts/check-codex-parity-conformance.mjs",
"check:context-manifest": "tsx scripts/check-context-manifest-contract.ts",
"check:drift-surfaces": "node scripts/check-drift-prone-surfaces.mjs",
"check:evidence-integrity": "tsx scripts/check-evidence-integrity.ts",
"check:headless-proto:generated": "node scripts/check-headless-proto-generated.mjs",
"check:maestro-release-gate-events": "tsx scripts/check-maestro-release-gate-events.ts",
"check:platform-runtime-conformance": "node scripts/check-platform-runtime-conformance.mjs",
"check:release-surface": "node scripts/check-release-surface-conformance.mjs",
"check:rpc-protocol-conformance": "tsx scripts/check-rpc-protocol-conformance.ts",
"check:scenario-replay-gate": "node scripts/run-scenario-replay-gate.mjs",
"check:scripted-scenario-fixtures": "tsx scripts/check-scripted-scenario-fixtures.ts",
"check:session-replay-fixtures": "tsx scripts/check-session-replay-fixtures.ts",
"check:session-wire-contract": "tsx scripts/check-session-wire-contract.ts",
"check:session-wire-format:generated": "node scripts/session-wire-format-codegen.mjs --check",
"check:slack-teammate-runtime-scenarios": "tsx scripts/check-slack-teammate-runtime-scenarios.ts",
"check:staged-rollout": "node scripts/check-staged-rollout.mjs",
"check:test-skip-hygiene": "node scripts/check-test-skip-hygiene.mjs",
"check:test-timing-wait-hygiene": "node scripts/check-test-timing-wait-hygiene.mjs",
"check:workflow-footguns": "node scripts/check-workflow-footguns.mjs",
"ci:plan": "node scripts/plan-ci-checks.mjs",
"clean": "node ./scripts/clean-paths.js dist ./tmp/tsbuildinfo/composer.tsbuildinfo",
"cli": "node ./dist/cli.js",
"compile:binary": "npm run bun:compile && echo \"Binary ready at dist/maestro-bun\"",
"control-plane-rs:build": "cd packages/control-plane-rs && cargo build --release --bin maestro-control-plane",
"control-plane-rs:check": "cd packages/control-plane-rs && cargo check --bin maestro-control-plane",
"cutover:check": "node scripts/check-package-cutover-readiness.js",
"db:check": "bun run src/db/check.ts",
"db:generate": "MAESTRO_DATABASE_TYPE=postgres drizzle-kit generate",
"db:migrate": "bun run src/db/migrate.ts",
"db:migrate:status": "bun run -e \"import('./src/db/migrate.js').then(m => m.getMigrationStatus()).then(console.log)\"",
"db:seed": "bun run src/db/seed.ts",
"db:studio": "drizzle-kit studio",
"dev": "node ./scripts/headless-protocol-codegen.mjs && bun run generate:headless-proto:buf && node ./scripts/ensure-dir.js ./tmp/tsbuildinfo && tsc -b tsconfig.build.json --watch --preserveWatchOutput",
"dev:all": "concurrently --names \"cli,test\" --prefix-colors \"cyan,yellow\" \"npm run dev\" \"npm run test:watch\"",
"dev:packages": "concurrently --names \"tui,web\" --prefix-colors \"magenta,green\" \"bun run dev:tui\" \"bun run dev:web\"",
"dev:tui": "bun run --filter @evalops/tui dev",
"dev:web": "bun run --filter @evalops/maestro-web dev",
"developer-surface:check": "node scripts/check-developer-surface.mjs",
"device-identity:harness": "MAESTRO_DEVICE_IDENTITY_ALLOW_TEST_HELPER=1 node ./scripts/run-vitest.js --run test/oauth-device-identity-harness.test.ts",
"evals": "npm run build && node scripts/run-evals.js",
"evals:openrouter-approvals-judge": "bun run build && bunx tsx scripts/evals/run-openrouter-approvals-judge-evals.ts",
"evals:openrouter-live-smoke": "bun run build && bunx tsx scripts/evals/run-openrouter-live-smoke.ts",
"evals:openrouter-tool-surface-judge": "bun run build && bunx tsx scripts/evals/run-openrouter-tool-surface-judge-evals.ts",
"evals:pipeline-tool-integration": "bun run build && bunx tsx scripts/evals/run-pipeline-tool-integration-evals.ts",
"evals:platform-fermata-scenario-suite": "bun run build && bunx tsx scripts/evals/run-platform-fermata-scenario-suite.ts",
"evals:shared-memory-integration": "bun run build && bunx tsx scripts/evals/run-shared-memory-integration-evals.ts",
"evals:skill-package": "bunx tsx scripts/evals/run-skill-package-evals.ts",
"factory:export": "npm run build && node dist/scripts/export-factory-config.js",
"factory:import": "npm run build && node dist/scripts/import-factory-config.js",
"format": "biome format .",
"generate-models": "bun scripts/generate-models.ts",
"generate:app-server-schema": "tsx scripts/app-server-schema-codegen.ts",
"generate:headless-proto:buf": "buf generate --template buf.gen.yaml && bunx biome check --write --unsafe packages/contracts/src/proto/maestro/v1/headless_pb.ts",
"generate:headless-protocol": "node scripts/headless-protocol-codegen.mjs",
"generate:session-wire-format": "node scripts/session-wire-format-codegen.mjs",
"guardian": "bash scripts/guardian.sh",
"guardian:install-hook": "node scripts/install-guardian-hook.js",
"headless:responsiveness": "node scripts/headless-responsiveness-harness.js",
"install:local": "node ./scripts/install-client.js",
"lint": "biome check . && npm run lint:evals",
"lint:evals": "bun run lint:headless-proto && node scripts/ensure-deps.js --no-install --workspace @evalops/contracts && node scripts/verify-evals.js && node scripts/verify-tool-versions.js && node scripts/validate-system-paths.js && node scripts/validate-package-boundaries.js && node scripts/validate-public-package-deps.js && node scripts/check-public-surface-boundary.mjs && npm run check:context-manifest && npm run check:session-wire-contract && npm run check:cli-runtime-conformance && npm run check:rpc-protocol-conformance && npm run check:evidence-integrity && npm run check:maestro-release-gate-events && npm run check:session-replay-fixtures && npm run check:agent-trajectory-fixtures && npm run check:agent-trajectory-replay-fixtures && npm run check:agent-trajectory-score-fixtures && npm run check:agent-trajectory-inspection-fixtures && npm run check:agent-trajectory-scenario-fixtures && npm run check:slack-teammate-runtime-scenarios && npm run check:scripted-scenario-fixtures && node scripts/session-wire-format-codegen.mjs --check && node scripts/headless-protocol-codegen.mjs --check && npm run check:app-server-schema && npm run check:drift-surfaces && npm run check:staged-rollout && npm run check:workflow-footguns && npm run check:test-skip-hygiene && npm run check:test-timing-wait-hygiene && npm run check:atomic-write-hygiene && npm run check:codex-parity && npm run check:codex-operating-layer && npm run check:platform-runtime-conformance && npm run check:release-surface && npm run developer-surface:check",
"lint:headless-proto": "buf lint && bun run verify:headless-proto:sync && bun run check:headless-proto:generated",
"metadata:check": "node scripts/sync-package-metadata.js --check",
"metadata:sync": "node scripts/sync-package-metadata.js",
"nix:update-hash": "bash scripts/update-nix-hash.sh",
"openapi:check": "bun scripts/generate-openapi.ts --check",
"openapi:generate": "bun scripts/generate-openapi.ts",
"openapi:serve": "bun scripts/serve-openapi.ts",
"platform:a2a-delegation-live": "tsx scripts/smoke-platform-a2a-delegation-live.ts",
"platform:a2a-evidence-verify": "tsx scripts/verify-platform-a2a-live-evidence.ts",
"platform:agentruntime-e2e": "tsx scripts/smoke-platform-agentruntime-lifecycle.ts",
"platform:sdk-smoke": "tsx scripts/check-platform-sdk-contract.ts",
"platform:timeline-e2e": "tsx scripts/smoke-platform-timeline-e2e.ts",
"postinstall": "node -e \"const fs=require('node:fs');const cp=require('node:child_process');if(!fs.existsSync('./scripts/ensure-deps.js')||!fs.existsSync('./packages/contracts/package.json'))process.exit(0);const r=cp.spawnSync(process.execPath,['./scripts/ensure-deps.js','--no-install'],{stdio:'inherit'});process.exit(r.status??1);\"",
"pr:feedback": "node scripts/pr-feedback-audit.mjs",
"pr:ready": "node scripts/pr-ready-to-merge.mjs",
"prebuild": "node ./scripts/ensure-deps.js && node ./scripts/session-wire-format-codegen.mjs && node ./scripts/headless-protocol-codegen.mjs && bun run generate:headless-proto:buf",
"prepare": "husky",
"prepublishOnly": "npm run clean && npm run build && npm run verify:runtime-deps",
"release:check": "node scripts/release-readiness.js release",
"release:check:ci": "node scripts/release-readiness.js ci",
"release:deprecate": "node scripts/deprecate-release.js",
"release:verify:published": "node scripts/smoke-registry-install.js",
"release:verify:published:e2e": "node scripts/smoke-published-replay-e2e.js",
"release:verify:published:evidence": "node scripts/verify-published-replay-evidence.js",
"rust:harness": "bash scripts/rust-local-harness.sh",
"setup:worktree": "node scripts/setup-worktree.mjs",
"smoke": "node scripts/smoke-cli.js",
"smoke:a2a-input-required": "tsx scripts/smoke-maestro-a2a-input-required.ts",
"smoke:a2a-local": "tsx scripts/smoke-maestro-a2a-local.ts",
"smoke:a2a-local-swarm": "tsx scripts/smoke-maestro-a2a-local-swarm.ts",
"smoke:a2a-tmux": "bash scripts/smoke-maestro-a2a-tmux.sh",
"smoke:codex-app-server-live": "node scripts/smoke-codex-app-server-live.mjs",
"smoke:event-bus": "tsx scripts/smoke-maestro-event-bus.ts",
"smoke:exec-replay-e2e": "node scripts/smoke-exec-replay-e2e.js",
"smoke:fathom-cua-mcp": "tsx scripts/smoke-fathom-cua-mcp.ts",
"smoke:headless": "node scripts/smoke-headless.js",
"smoke:local-e2e": "node scripts/smoke-cli.js",
"smoke:pack": "node scripts/smoke-packed-cli.js",
"smoke:release-binary": "node scripts/smoke-release-binary.mjs",
"start": "node --enable-source-maps dist/cli.js",
"start:native": "MAESTRO_AGENT_SCRIPT=\"$(pwd)/dist/cli.js\" ./packages/tui-rs/target/release/maestro-tui",
"telemetry:report": "node scripts/telemetry-report.js",
"test": "node ./scripts/run-vitest.js --run",
"test:all": "npm run test && npm run test --workspaces --if-present",
"test:coverage": "node ./scripts/run-vitest.js --run --coverage",
"test:fast": "VITEST_FAST=1 node ./scripts/run-vitest.js --run",
"test:integration:capabilities": "node scripts/run-capability-integration-tests.mjs",
"test:watch": "node ./scripts/run-vitest.js --watch",
"tui": "npm run cli",
"tui-rs:build": "cd packages/tui-rs && cargo build --release",
"tui-rs:build:debug": "cd packages/tui-rs && cargo build",
"tui-rs:check": "cd packages/tui-rs && cargo check",
"tui-rs:test": "cd packages/tui-rs && cargo test",
"verify": "npm run format && npm run lint && npm run test && npm run build && npm run smoke && npm run telemetry:report",
"verify-build": "bun scripts/verify-build.ts",
"verify-build:packages": "VERIFY_PACKAGES=1 bun scripts/verify-build.ts",
"verify:headless-proto:sync": "node scripts/verify-headless-proto-sync.mjs",
"verify:runtime-deps": "node scripts/check-runtime-deps.js && node scripts/check-docker-runtime-workspaces.mjs && node scripts/check-packed-bundled-workspaces.mjs",
"version:major": "node scripts/version.js major",
"version:minor": "node scripts/version.js minor",
"version:patch": "node scripts/version.js patch",
"version:sync": "node scripts/sync-versions.js",
"vscode:build": "npx nx run vscode-extension:build",
"vscode:package": "npx nx run vscode-extension:package",
"vscode:publish": "npx nx run vscode-extension:publish",
"web": "node dist/web-server.js",
"web:dev": "node ./scripts/ensure-deps.js --workspace @evalops/contracts && concurrently --names \"server,ui\" --prefix-colors \"blue,green\" \"tsx --watch src/web-server.ts\" \"bun run dev:web\"",
"web:dev:local": "MAESTRO_WEB_REQUIRE_KEY=0 MAESTRO_WEB_REQUIRE_REDIS=0 MAESTRO_WEB_ORIGIN=http://localhost:3000 npm run web:dev",
"web:rust-control": "packages/control-plane-rs/target/release/maestro-control-plane"
},
"signal_details": {
"dependency_added_unknown": "2 new non-watchlisted dep(s): ['@napi-rs/keyring', 'undici']",
"install_script_payload": "install/lifecycle script matches payload regex",
"script_count_spike": "scripts count 149 -> 156"
},
"time": {
"created": "2026-04-22T03:13:11.852Z",
"modified": "2026-06-18T02:08:46.314Z"
}
}