npm @openagentsinc/pylon @1.0.0
score
0.5489
med
flagged
2026-06-18 14:57
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| script_count_spike | 0.5 | scripts count 1 -> 19 |
| size_spike | 0.5 | unpackedSize 113323 -> 3107380 (27.4×) |
| topology | ||
| repository_url_changed | 0.7 | 'git+https://github.com/OpenAgentsInc/openagents.git' -> 'git+https://github.com/OpenAgentsInc/pylon.git' |
| dependency_added_unknown | 0.6 | 12 new non-watchlisted dep(s): ['@noble/curves', '@noble/hashes', '@openagentsinc/agent-runtime-schema', '@openagentsinc/autopilot-control-protocol', '@openagentsinc/nip90'] ... |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 9d ago but package has 52 versions (expect >= 102d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"openagentsinc"
],
"versions": 51
}
Evidence (package doc at flag time)
{
"dependencies_count": 12,
"dist": {
"integrity": "sha512-JTuXTGtSDYM3hOB0jPHbQmINRbwvzMOOb6YWdaXDsHs3VXdHnwqAHGhVvxFhQeJsitwXSTrwBsrgDGrKS7zmyw==",
"tarball": "https://registry.npmjs.org/@openagentsinc/pylon/-/pylon-1.0.0.tgz",
"unpackedSize": 3107380
},
"dist-tags": {
"latest": "1.0.0",
"rc": "1.0.0-rc.33"
},
"latest_version": "1.0.0",
"maintainers": [
{
"email": "chris@openagents.com",
"name": "openagentsinc"
}
],
"num_versions": 52,
"repository": {
"type": "git",
"url": "git+https://github.com/OpenAgentsInc/pylon.git"
},
"scripts": {
"build:apple-fm-bridge": "bash swift/foundation-bridge/build.sh",
"build:rc-binaries": "bash scripts/build-rc-binaries.sh",
"provider:serve": "bun scripts/nip90-provider-serve.ts",
"release:gate": "bash scripts/release-gate.sh",
"runtime": "bun --cwd packages/runtime src/cli.ts",
"runtime:test": "bun run --cwd packages/runtime test",
"smoke:claude-agent-task": "bun scripts/claude-agent-task-smoke.ts",
"smoke:codex-agent-task": "bun scripts/codex-agent-task-smoke.ts",
"smoke:default-start": "rm -f /tmp/pylon-default-start.log; perl -e 'alarm 3; $ENV{PYLON_DISABLE_OPENCODE_STARTUP}=1; exec @ARGV' bun src/index.ts > /tmp/pylon-default-start.log 2>&1; code=$?; if [ \"$code\" -ne 142 ] && [ \"$code\" -ne 0 ]; then cat /tmp/pylon-default-start.log; exit \"$code\"; fi; if rg -n 'TypeError|Effect\\.(fork|catchAll)|is not a function|\\[ERROR\\]' /tmp/pylon-default-start.log; then exit 1; fi; printf 'default startup reached persistent mode without startup API errors\\n'",
"smoke:install:local": "bash scripts/smoke-local-package-install.sh",
"smoke:live-worker-loop": "bun scripts/live-worker-loop-smoke.ts",
"smoke:nip90-provider": "bun scripts/nip90-provider-loop-smoke.ts",
"smoke:packaged-network": "bun scripts/packaged-live-network-smoke.ts",
"smoke:packaged-runtime-task": "bun scripts/packaged-runtime-task-smoke.ts",
"smoke:psionic-qwen": "bun scripts/psionic-qwen-live-smoke.ts",
"smoke:stranger-probe": "bun scripts/stranger-probe-smoke.ts",
"smoke:wallet": "npx --yes @moneydevkit/agent-wallet@latest balance | bun -e 'const input = await new Response(Bun.stdin.stream()).text(); const json = JSON.parse(input); if (typeof json.balance_sats !== \"number\") { console.error(input.trim()); process.exit(1); } console.log(`wallet balance: ${json.balance_sats} sats`);'",
"start": "bun src/index.ts",
"test": "bun test --max-concurrency=1"
},
"signal_details": {
"dependency_added_unknown": "12 new non-watchlisted dep(s): ['@noble/curves', '@noble/hashes', '@openagentsinc/agent-runtime-schema', '@openagentsinc/autopilot-control-protocol', '@openagentsinc/nip90'] ...",
"repo_too_new_for_version_history": "claimed repo created 9d ago but package has 52 versions (expect >= 102d for that history)",
"repository_url_changed": "'git+https://github.com/OpenAgentsInc/openagents.git' -> 'git+https://github.com/OpenAgentsInc/pylon.git'",
"script_count_spike": "scripts count 1 -> 19",
"size_spike": "unpackedSize 113323 -> 3107380 (27.4\u00d7)"
},
"time": {
"created": "2026-04-07T16:04:45.729Z",
"modified": "2026-06-18T19:57:40.488Z"
}
}