BEACON

← candidates

npm pentesting @0.90.8

score
0.6333 med
flagged 2026-06-19 23:38
signals by category
content 1 topology 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
content
script_count_spike 0.5 scripts count 11 -> 52
topology
repository_url_changed 0.7 'git+https://github.com/agnusdei1207/builder-public.git' -> 'git+https://github.com/agnusdei1207/pentesting-public.git'
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 48d ago but package has 260 versions (expect >= 144d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "agnusdei12071207"
  ],
  "versions": 259
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-bZbkfZwUS72yQmANVg0LzOScEJpIBD8YlJvXCnaO2fNdLCGhoRXtxlHWHmo3YeHZ4Jb6AfBq/FzNDZFdtCrwxA==",
    "tarball": "https://registry.npmjs.org/pentesting/-/pentesting-0.90.8.tgz",
    "unpackedSize": 29477
  },
  "dist-tags": {
    "latest": "0.90.8"
  },
  "latest_version": "0.90.8",
  "maintainers": [
    {
      "email": "agnusdei1207@kakao.com",
      "name": "agnusdei12071207"
    }
  ],
  "num_versions": 260,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/agnusdei1207/pentesting-public.git"
  },
  "scripts": {
    "build": "CARGO_TARGET_DIR=${CARGO_TARGET_DIR:-$HOME/.cache/builder-target} $HOME/.cargo/bin/cargo build --bin pentesting",
    "check": "sh -c 'npm run docker:builder:build && docker run -it --rm -v builder-workspace:/workspace -e ANTHROPIC_BASE_URL -e ANTHROPIC_AUTH_TOKEN -e ANTHROPIC_MODEL -e ANTHROPIC_API_KEY -e MINIMAX_API_KEY -e OPENAI_API_KEY -e OPENAI_BASE_URL -e GEMINI_API_KEY -e DEEPSEEK_API_KEY agnusdei1207/pentesting:latest'",
    "check:clean": "npm run docker:clean && npm run check",
    "check:interactive": "npm run check",
    "check:smoke": "sh -c 'npm run docker:builder:build && docker run --rm -v builder-workspace:/workspace agnusdei1207/pentesting:latest --version'",
    "docker:base:build": "docker build -t agnusdei1207/pentesting-build-base:1.95 -f docker/build-base.Dockerfile . && docker build -t agnusdei1207/pentesting-runtime-base:26.04 -f docker/runtime-base.Dockerfile .",
    "docker:base:push": "if [ -n \"$DOCKER_PASSWORD\" ]; then echo \"$DOCKER_PASSWORD\" | docker login -u \"${DOCKER_USERNAME:-agnusdei1207}\" --password-stdin; fi && npm run docker:base:build && docker push agnusdei1207/pentesting-build-base:1.95 && docker push agnusdei1207/pentesting-runtime-base:26.04",
    "docker:builder:build": "(docker image inspect agnusdei1207/pentesting-build-base:1.95 >/dev/null 2>&1 && docker image inspect agnusdei1207/pentesting-runtime-base:26.04 >/dev/null 2>&1 || npm run docker:base:build) && docker build --build-arg APP_VERSION=$(git describe --tags --abbrev=0 2>/dev/null || echo dev) -t agnusdei1207/pentesting:latest .",
    "docker:builder:push": "if [ -n \"$DOCKER_PASSWORD\" ]; then echo \"$DOCKER_PASSWORD\" | docker login -u \"${DOCKER_USERNAME:-agnusdei1207}\" --password-stdin; fi && npm run docker:builder:build && docker push agnusdei1207/pentesting:latest",
    "docker:builder:tag": "docker tag agnusdei1207/pentesting:latest agnusdei1207/pentesting:$(git describe --tags --abbrev=0) && docker push agnusdei1207/pentesting:$(git describe --tags --abbrev=0)",
    "docker:clean": "docker stop $(docker ps -q) 2>/dev/null || true && docker system prune -af",
    "eval": "tsx benchmarks/cli.ts",
    "eval:all": "npm run build && find benchmarks/evals -name task.yml -exec dirname {} \\; | sort | while read -r d; do echo \"\\n=== Running $(basename $d) ===\"; tsx benchmarks/cli.ts \"$d\" || true; done",
    "pentesting:check": "./scripts/check-pentesting-package.sh",
    "pentesting:help": "./scripts/pentesting-release-help.sh",
    "pentesting:pack:dry-run": "npm pack --dry-run",
    "pentesting:publish": "./scripts/publish-pentesting-package.sh",
    "pentesting:publish:dry-run": "DRY_RUN=true ./scripts/publish-pentesting-package.sh",
    "pentesting:release": "npm run pentesting:release:patch",
    "pentesting:release:dry-run": "npm run pentesting:release:patch:dry-run",
    "pentesting:release:major": "npm run pentesting:check && AUTO_PUSH=true ./scripts/publish-pentesting-package.sh major",
    "pentesting:release:major:dry-run": "npm run pentesting:check && DRY_RUN=true ./scripts/publish-pentesting-package.sh major",
    "pentesting:release:minor": "npm run pentesting:check && AUTO_PUSH=true ./scripts/publish-pentesting-package.sh minor",
    "pentesting:release:minor:dry-run": "npm run pentesting:check && DRY_RUN=true ./scripts/publish-pentesting-package.sh minor",
    "pentesting:release:patch": "npm run pentesting:check && AUTO_PUSH=true ./scripts/publish-pentesting-package.sh patch",
    "pentesting:release:patch:dry-run": "npm run pentesting:check && DRY_RUN=true ./scripts/publish-pentesting-package.sh patch",
    "pentesting:status": "./scripts/pentesting-release-status.sh",
    "pentesting:test": "npm run test",
    "pentesting:verify": "npm run verify",
    "postinstall": "node ./scripts/postinstall.mjs",
    "preflight:local": "bash scripts/preflight-local.sh",
    "prepublishOnly": "npm run verify",
    "public:ci:mirror": "gh workflow run 'Mirror Builder Release' --ref main -f version_tag=$(git describe --tags --abbrev=0)",
    "public:ci:status": "gh run list --workflow=sync-public.yml --limit=3 && echo '---' && gh run list --workflow=mirror-release.yml --limit=3",
    "public:ci:sync": "gh workflow run 'Sync Builder Repo' --ref main",
    "public:mirror-release": "./scripts/mirror-public-release.sh",
    "public:publish": "AUTO_PUSH=true ./scripts/sync-public-repo.sh && git add public && git commit -m 'chore: bump public facade pointer' && git push origin main",
    "public:pull": "git submodule update --remote --merge public",
    "public:sync": "./scripts/sync-public-repo.sh",
    "public:sync:push": "AUTO_PUSH=true ./scripts/sync-public-repo.sh",
    "release": "./scripts/release-all.sh patch",
    "release:backfill": "./scripts/run-release-in-docker.sh ./scripts/backfill-release-local.sh",
    "release:backfill:dry": "DRY_RUN=true ./scripts/run-release-in-docker.sh ./scripts/backfill-release-local.sh",
    "release:backfill:host": "./scripts/backfill-release-local.sh",
    "release:backfill:host:dry": "DRY_RUN=true ./scripts/backfill-release-local.sh",
    "release:dry": "DRY_RUN=true ./scripts/release-all.sh patch",
    "release:local": "./scripts/run-release-in-docker.sh ./scripts/build-release-local.sh",
    "release:local:dry": "DRY_RUN=true ./scripts/run-release-in-docker.sh ./scripts/build-release-local.sh",
    "release:local:host": "./scripts/build-release-local.sh",
    "release:local:host:dry": "DRY_RUN=true ./scripts/build-release-local.sh",
    "test": "node --test tests/*.test.mjs",
    "verify": "npm run preflight:local && npm run test"
  },
  "signal_details": {
    "repo_too_new_for_version_history": "claimed repo created 48d ago but package has 260 versions (expect >= 144d for that history)",
    "repository_url_changed": "'git+https://github.com/agnusdei1207/builder-public.git' -> 'git+https://github.com/agnusdei1207/pentesting-public.git'",
    "script_count_spike": "scripts count 11 -> 52"
  },
  "time": {
    "created": "2026-02-07T03:37:18.716Z",
    "modified": "2026-06-20T04:38:25.089Z"
  }
}