npm @ouro.bot/cli @0.1.0-alpha.670

score

0.7333 high

flagged 2026-06-20 23:13

signals by category

topology 2 enrichment 1

maintainers added: —

Signals fired

signal	weight	rationale
topology
shared_repo_different_publisher	0.9	repo 'git+https://github.com/ourostack/ouroboros.git' also claimed by 1 package(s) under different publishers: ['npm/ouro.bot']
dependency_added_unknown	0.6	1 new non-watchlisted dep(s): ['@ouro.bot/friends']
enrichment
repo_too_new_for_version_history	0.7	claimed repo created 112d ago but package has 626 versions (expect >= 167d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "arimendelow"
  ],
  "versions": 625
}

Evidence (package doc at flag time)

{
  "dependencies_count": 21,
  "dist": {
    "integrity": "sha512-8kn/9AcqQh6xezQy/K5B2nIXUXW6avTgKIrpEZKI8tMJGQ6gL5VJfZJhMcLmvjabbFdd90FGPcx1R+ecLaXyRA==",
    "tarball": "https://registry.npmjs.org/@ouro.bot/cli/-/cli-0.1.0-alpha.670.tgz",
    "unpackedSize": 6802542
  },
  "dist-tags": {
    "alpha": "0.1.0-alpha.538",
    "latest": "0.1.0-alpha.670"
  },
  "latest_version": "0.1.0-alpha.670",
  "maintainers": [
    {
      "email": "ari@mendelow.me",
      "name": "arimendelow"
    }
  ],
  "num_versions": 626,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/ourostack/ouroboros.git"
  },
  "scripts": {
    "audit:nerves": "npm run build && node dist/nerves/coverage/cli-main.js",
    "bluebubbles": "tsc && node dist/senses/bluebubbles/entry.js --agent ouroboros",
    "build": "node scripts/build.cjs",
    "cli": "tsc && node dist/senses/cli-entry.js",
    "daemon": "tsc && node dist/heart/daemon/daemon-entry.js",
    "dev": "tsc && node dist/heart/daemon/ouro-bot-entry.js dev",
    "lint": "eslint src/",
    "ouro": "tsc && node dist/heart/daemon/ouro-entry.js",
    "package:verify-assets": "node scripts/package-assets.cjs",
    "prepack": "npm run build && npm run package:verify-assets",
    "release:bump": "node scripts/release-bump.cjs",
    "release:preflight": "node scripts/release-preflight.cjs",
    "release:smoke": "node scripts/release-smoke.cjs",
    "release:trust:check": "node scripts/npm-trusted-publishers.cjs check",
    "release:trust:repair": "node scripts/npm-trusted-publishers.cjs repair",
    "release:trust:repair-plan": "node scripts/npm-trusted-publishers.cjs repair-plan",
    "teams": "tsc && node dist/senses/teams-entry.js --agent ouroboros",
    "test": "vitest run",
    "test:coverage": "node scripts/run-coverage-gate.cjs",
    "test:coverage:vitest": "vitest run --coverage",
    "test:e2e:package": "npm run build && node scripts/package-e2e.cjs",
    "test:e2e:real-smoke": "npm run build && node scripts/nightly-real-smoke.cjs",
    "test:integration": "npm run build && vitest run --config vitest.integration.config.ts",
    "test:mailbox-ui": "npm test --prefix packages/mailbox-ui",
    "typecheck:mailbox-ui": "tsc --noEmit -p packages/mailbox-ui/tsconfig.json",
    "voice:eval": "npm run build && node dist/senses/voice-realtime-eval-entry.js",
    "worktree:bootstrap": "npm install --ignore-scripts"
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['@ouro.bot/friends']",
    "repo_too_new_for_version_history": "claimed repo created 112d ago but package has 626 versions (expect >= 167d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/ourostack/ouroboros.git' also claimed by 1 package(s) under different publishers: ['npm/ouro.bot']"
  },
  "time": {
    "created": "2026-03-06T23:52:54.204Z",
    "modified": "2026-06-21T03:16:40.766Z"
  }
}