npm pentesting @0.90.8
score
0.6333
med
flagged
2026-06-19 23:38
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| script_count_spike | 0.5 | scripts count 11 -> 52 |
| topology | ||
| repository_url_changed | 0.7 | 'git+https://github.com/agnusdei1207/builder-public.git' -> 'git+https://github.com/agnusdei1207/pentesting-public.git' |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 48d ago but package has 260 versions (expect >= 144d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"agnusdei12071207"
],
"versions": 259
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-bZbkfZwUS72yQmANVg0LzOScEJpIBD8YlJvXCnaO2fNdLCGhoRXtxlHWHmo3YeHZ4Jb6AfBq/FzNDZFdtCrwxA==",
"tarball": "https://registry.npmjs.org/pentesting/-/pentesting-0.90.8.tgz",
"unpackedSize": 29477
},
"dist-tags": {
"latest": "0.90.8"
},
"latest_version": "0.90.8",
"maintainers": [
{
"email": "agnusdei1207@kakao.com",
"name": "agnusdei12071207"
}
],
"num_versions": 260,
"repository": {
"type": "git",
"url": "git+https://github.com/agnusdei1207/pentesting-public.git"
},
"scripts": {
"build": "CARGO_TARGET_DIR=${CARGO_TARGET_DIR:-$HOME/.cache/builder-target} $HOME/.cargo/bin/cargo build --bin pentesting",
"check": "sh -c 'npm run docker:builder:build && docker run -it --rm -v builder-workspace:/workspace -e ANTHROPIC_BASE_URL -e ANTHROPIC_AUTH_TOKEN -e ANTHROPIC_MODEL -e ANTHROPIC_API_KEY -e MINIMAX_API_KEY -e OPENAI_API_KEY -e OPENAI_BASE_URL -e GEMINI_API_KEY -e DEEPSEEK_API_KEY agnusdei1207/pentesting:latest'",
"check:clean": "npm run docker:clean && npm run check",
"check:interactive": "npm run check",
"check:smoke": "sh -c 'npm run docker:builder:build && docker run --rm -v builder-workspace:/workspace agnusdei1207/pentesting:latest --version'",
"docker:base:build": "docker build -t agnusdei1207/pentesting-build-base:1.95 -f docker/build-base.Dockerfile . && docker build -t agnusdei1207/pentesting-runtime-base:26.04 -f docker/runtime-base.Dockerfile .",
"docker:base:push": "if [ -n \"$DOCKER_PASSWORD\" ]; then echo \"$DOCKER_PASSWORD\" | docker login -u \"${DOCKER_USERNAME:-agnusdei1207}\" --password-stdin; fi && npm run docker:base:build && docker push agnusdei1207/pentesting-build-base:1.95 && docker push agnusdei1207/pentesting-runtime-base:26.04",
"docker:builder:build": "(docker image inspect agnusdei1207/pentesting-build-base:1.95 >/dev/null 2>&1 && docker image inspect agnusdei1207/pentesting-runtime-base:26.04 >/dev/null 2>&1 || npm run docker:base:build) && docker build --build-arg APP_VERSION=$(git describe --tags --abbrev=0 2>/dev/null || echo dev) -t agnusdei1207/pentesting:latest .",
"docker:builder:push": "if [ -n \"$DOCKER_PASSWORD\" ]; then echo \"$DOCKER_PASSWORD\" | docker login -u \"${DOCKER_USERNAME:-agnusdei1207}\" --password-stdin; fi && npm run docker:builder:build && docker push agnusdei1207/pentesting:latest",
"docker:builder:tag": "docker tag agnusdei1207/pentesting:latest agnusdei1207/pentesting:$(git describe --tags --abbrev=0) && docker push agnusdei1207/pentesting:$(git describe --tags --abbrev=0)",
"docker:clean": "docker stop $(docker ps -q) 2>/dev/null || true && docker system prune -af",
"eval": "tsx benchmarks/cli.ts",
"eval:all": "npm run build && find benchmarks/evals -name task.yml -exec dirname {} \\; | sort | while read -r d; do echo \"\\n=== Running $(basename $d) ===\"; tsx benchmarks/cli.ts \"$d\" || true; done",
"pentesting:check": "./scripts/check-pentesting-package.sh",
"pentesting:help": "./scripts/pentesting-release-help.sh",
"pentesting:pack:dry-run": "npm pack --dry-run",
"pentesting:publish": "./scripts/publish-pentesting-package.sh",
"pentesting:publish:dry-run": "DRY_RUN=true ./scripts/publish-pentesting-package.sh",
"pentesting:release": "npm run pentesting:release:patch",
"pentesting:release:dry-run": "npm run pentesting:release:patch:dry-run",
"pentesting:release:major": "npm run pentesting:check && AUTO_PUSH=true ./scripts/publish-pentesting-package.sh major",
"pentesting:release:major:dry-run": "npm run pentesting:check && DRY_RUN=true ./scripts/publish-pentesting-package.sh major",
"pentesting:release:minor": "npm run pentesting:check && AUTO_PUSH=true ./scripts/publish-pentesting-package.sh minor",
"pentesting:release:minor:dry-run": "npm run pentesting:check && DRY_RUN=true ./scripts/publish-pentesting-package.sh minor",
"pentesting:release:patch": "npm run pentesting:check && AUTO_PUSH=true ./scripts/publish-pentesting-package.sh patch",
"pentesting:release:patch:dry-run": "npm run pentesting:check && DRY_RUN=true ./scripts/publish-pentesting-package.sh patch",
"pentesting:status": "./scripts/pentesting-release-status.sh",
"pentesting:test": "npm run test",
"pentesting:verify": "npm run verify",
"postinstall": "node ./scripts/postinstall.mjs",
"preflight:local": "bash scripts/preflight-local.sh",
"prepublishOnly": "npm run verify",
"public:ci:mirror": "gh workflow run 'Mirror Builder Release' --ref main -f version_tag=$(git describe --tags --abbrev=0)",
"public:ci:status": "gh run list --workflow=sync-public.yml --limit=3 && echo '---' && gh run list --workflow=mirror-release.yml --limit=3",
"public:ci:sync": "gh workflow run 'Sync Builder Repo' --ref main",
"public:mirror-release": "./scripts/mirror-public-release.sh",
"public:publish": "AUTO_PUSH=true ./scripts/sync-public-repo.sh && git add public && git commit -m 'chore: bump public facade pointer' && git push origin main",
"public:pull": "git submodule update --remote --merge public",
"public:sync": "./scripts/sync-public-repo.sh",
"public:sync:push": "AUTO_PUSH=true ./scripts/sync-public-repo.sh",
"release": "./scripts/release-all.sh patch",
"release:backfill": "./scripts/run-release-in-docker.sh ./scripts/backfill-release-local.sh",
"release:backfill:dry": "DRY_RUN=true ./scripts/run-release-in-docker.sh ./scripts/backfill-release-local.sh",
"release:backfill:host": "./scripts/backfill-release-local.sh",
"release:backfill:host:dry": "DRY_RUN=true ./scripts/backfill-release-local.sh",
"release:dry": "DRY_RUN=true ./scripts/release-all.sh patch",
"release:local": "./scripts/run-release-in-docker.sh ./scripts/build-release-local.sh",
"release:local:dry": "DRY_RUN=true ./scripts/run-release-in-docker.sh ./scripts/build-release-local.sh",
"release:local:host": "./scripts/build-release-local.sh",
"release:local:host:dry": "DRY_RUN=true ./scripts/build-release-local.sh",
"test": "node --test tests/*.test.mjs",
"verify": "npm run preflight:local && npm run test"
},
"signal_details": {
"repo_too_new_for_version_history": "claimed repo created 48d ago but package has 260 versions (expect >= 144d for that history)",
"repository_url_changed": "'git+https://github.com/agnusdei1207/builder-public.git' -> 'git+https://github.com/agnusdei1207/pentesting-public.git'",
"script_count_spike": "scripts count 11 -> 52"
},
"time": {
"created": "2026-02-07T03:37:18.716Z",
"modified": "2026-06-20T04:38:25.089Z"
}
}