npm chefcookie @3.0.1
score
0.6403
med
flagged
2026-06-18 04:50
amplifiers
co-occurring signal pairs that lift the final score
- install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| new_install_script | 1.0 | first time ['preinstall'] present |
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [],
"versions": 0
}
Evidence (package doc at flag time)
{
"dependencies_count": 2,
"dist": {
"integrity": "sha512-hrgeQkAkJnKnkHesuAqSqFrf5j663sYvklQ4XAidSOrGFxs0VaCs9Yz0Z+P6vQCLFnXJosKeJBb7czy8ZVMMfQ==",
"tarball": "https://registry.npmjs.org/chefcookie/-/chefcookie-3.0.1.tgz",
"unpackedSize": 180206
},
"dist-tags": {
"latest": "3.0.1"
},
"latest_version": "3.0.1",
"maintainers": [
{
"email": "david@vielhuber.de",
"name": "vielhuber"
}
],
"num_versions": 197,
"repository": {
"type": "git",
"url": "git+ssh://git@github.com/vielhuber/chefcookie.git"
},
"scripts": {
"build": "npm run prod",
"cypress:open": "start-server-and-test start http://localhost:18080 'cypress open'",
"cypress:test": "start-server-and-test start http://localhost:18080 'npx cypress run'",
"dev": "npm-run-all --parallel watch:*",
"js": "npm-run-all --sequential js:vite js:minify js:package",
"js:dev": "npm-run-all --sequential js:vite js:package",
"js:minify": "terser --compress --mangle --comments false --output ./chefcookie.min.js ./chefcookie.min.js",
"js:package": "vite build --logLevel error --mode package",
"js:vite": "vite build --logLevel error",
"preinstall": "node -e \"if(+process.versions.node.split('.')[0]<20){console.error('chefcookie requires Node >=20 (current LTS).');process.exit(1)}\"",
"prod": "npm-run-all --parallel js",
"start": "serve --listen 18080",
"test": "npm run cypress:test",
"update-changelog": "auto-changelog --commit-limit false --package",
"watch:js": "onchange ./_js/*.js --initial --poll 50 --delay 0 --await-write-finish 50 -- npm run js:dev"
},
"signal_details": {
"_amplifiers": [
"install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)"
],
"install_script_payload": "install/lifecycle script matches payload regex",
"new_install_script": "first time ['preinstall'] present"
},
"time": {
"created": "2018-06-29T10:52:12.345Z",
"modified": "2026-06-18T09:49:57.740Z"
}
}