npm shopport @0.4.2
score
0.5391
med
flagged
2026-06-20 02:25
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"onlymytho"
],
"versions": 26
}
Evidence (package doc at flag time)
{
"dependencies_count": 11,
"dist": {
"integrity": "sha512-ZVyKT8xIHJ7dqgnbqXlfQx/WCJErT7pcDtjovsQWrTIuM9V0qJPh8sO5279TDhh8NSrIwB0+VfdtwrwSNQqlKA==",
"tarball": "https://registry.npmjs.org/shopport/-/shopport-0.4.2.tgz",
"unpackedSize": 4144812
},
"dist-tags": {
"latest": "0.4.2"
},
"latest_version": "0.4.2",
"maintainers": [
{
"email": "onlymytho@gmail.com",
"name": "onlymytho"
}
],
"num_versions": 28,
"repository": null,
"scripts": {
"build": "bun run build:dashboard && tsup && node -e \"const fs=require('fs');const f='dist/cli.js';const c=fs.readFileSync(f,'utf8');fs.writeFileSync(f,'#!/usr/bin/env bun\\n'+c);fs.chmodSync(f,0o755)\"",
"build:dashboard": "cd dashboard-ui && bun install && bun run build",
"build:publish": "SHOPPORT_PUBLISH=1 bun run build",
"dev": "tsx watch src/cli.ts",
"postinstall": "node -e \"try{require('child_process').execFileSync(process.execPath,['dist/cli.js','setup-skills'],{stdio:'pipe'})}catch(_){}\"",
"prepublishOnly": "bun run build:publish",
"start": "node dist/cli.js",
"test": "vitest run"
},
"signal_details": {
"install_script_payload": "install/lifecycle script matches payload regex",
"no_repo": "package.json has no repository field"
},
"time": {
"created": "2026-04-20T09:06:15.295Z",
"modified": "2026-06-20T07:25:35.140Z"
}
}