npm vaultlier @0.1.22
score
0.5019
med
flagged
2026-06-20 10:43
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| script_count_spike | 0.5 | scripts count 11 -> 17 |
| provenance_dropped | 0.8 | prior version published with SLSA attestation; current version has none |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 9d ago but package has 16 versions (expect >= 72d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"degolojan"
],
"versions": 14
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-tmTIOpjltVRRJraVb9loNeAkBpw79oHTD+qSTSeBtD35gb3sVc+ORpV8FzlD0nDDP5aqlF62e6uzoMrGxvycag==",
"tarball": "https://registry.npmjs.org/vaultlier/-/vaultlier-0.1.22.tgz",
"unpackedSize": 454358
},
"dist-tags": {
"latest": "0.1.22"
},
"latest_version": "0.1.22",
"maintainers": [
{
"email": "degolojantechnologies@gmail.com",
"name": "degolojan"
}
],
"num_versions": 16,
"repository": {
"type": "git",
"url": "git+https://github.com/aguchux/vaultlier.git"
},
"scripts": {
"build": "npm run build:js && npm run build:types",
"build:js": "tsup",
"build:types": "tsc -p tsconfig.build.json",
"check-types": "tsc --noEmit",
"clean": "node -e \"for (const p of ['dist', '.turbo', 'coverage']) require('node:fs').rmSync(p, { recursive: true, force: true })\"",
"dev": "tsup --watch",
"format": "prettier --write \"**/*.{js,cjs,mjs,ts,tsx,json,jsonc,css,md,mdx,yml,yaml}\"",
"format:check": "prettier --check \"**/*.{js,cjs,mjs,ts,tsx,json,jsonc,css,md,mdx,yml,yaml}\"",
"lint": "eslint . --max-warnings 0",
"prepublishOnly": "npm run build",
"test": "vitest run",
"test:coverage": "vitest run --coverage",
"test:watch": "vitest",
"version:major": "npm version major --no-git-tag-version",
"version:minor": "npm version minor --no-git-tag-version",
"version:patch": "npm version patch --no-git-tag-version",
"version:vaultlier": "npm version --no-git-tag-version"
},
"signal_details": {
"provenance_dropped": "prior version published with SLSA attestation; current version has none",
"repo_too_new_for_version_history": "claimed repo created 9d ago but package has 16 versions (expect >= 72d for that history)",
"script_count_spike": "scripts count 11 -> 17"
},
"time": {
"created": "2026-06-10T21:36:17.138Z",
"modified": "2026-06-20T15:43:39.203Z"
}
}