npm @aexhq/sdk @0.26.5

score

0.6144 med

flagged 2026-06-21 10:46

signals by category

content 1 cadence 1 topology 1 enrichment 1

maintainers added: —

Signals fired

signal	weight	rationale
content
script_count_spike	0.5	scripts count 8 -> 13
cadence
rapid_release	0.8	6 versions in last 24h: ['0.26.1', '0.26.2', '0.26.3', '0.26.4', '0.26.5']
topology
shared_repo_different_publisher	0.9	repo 'git+https://github.com/aexhq/aex.git' also claimed by 3 package(s) under different publishers: ['npm/@aexhq/contracts', 'npm/@aexhq/conformance', 'npm/@aexhq/cli']
enrichment
repo_too_new_for_version_history	0.7	claimed repo created 17d ago but package has 30 versions (expect >= 88d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "weilueluo"
  ],
  "versions": 30
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-y6U2ugvTqVkyG1xUzcKRw01rVSLpUzIW2KJVy0s/Wi/OIkJUtR/vyGKq55+yuuLz7tgGMMw2RjkpazflwbpQOg==",
    "tarball": "https://registry.npmjs.org/@aexhq/sdk/-/sdk-0.26.5.tgz",
    "unpackedSize": 1102709
  },
  "dist-tags": {
    "canary": "0.26.5",
    "dark": "0.13.6",
    "latest": "0.26.5"
  },
  "latest_version": "0.26.5",
  "maintainers": [
    {
      "email": "luoweilue@gmail.com",
      "name": "weilueluo"
    }
  ],
  "num_versions": 30,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/aexhq/aex.git"
  },
  "scripts": {
    "build": "bun ../../scripts/with-generated-dist-lock.mjs bun run build:unlocked",
    "build:unlocked": "bun ./scripts/clean-dist.mjs && bun run --cwd ../.. --filter @aexhq/contracts build && bun run --cwd ../.. --filter @aexhq/cli build && tsc -p tsconfig.build.json && bun ./scripts/bundle-cli.mjs && bun ./scripts/inline-contracts.mjs",
    "lint": "bun ../../scripts/with-generated-dist-lock.mjs bun run lint:unlocked",
    "lint:unlocked": "tsc --noEmit",
    "pack:dry-run": "bun ../../scripts/with-generated-dist-lock.mjs bun pm pack --dry-run --ignore-scripts",
    "prepack": "bun run build",
    "test": "bun run test:unit",
    "test:coverage": "vitest run --coverage test/unit",
    "test:property": "vitest run --passWithNoTests property",
    "test:security": "bun ../../scripts/with-generated-dist-lock.mjs bun run test:security:unlocked",
    "test:security:unlocked": "vitest run test/security",
    "test:unit": "bun ../../scripts/with-generated-dist-lock.mjs bun run test:unit:unlocked",
    "test:unit:unlocked": "vitest run test/unit"
  },
  "signal_details": {
    "rapid_release": "6 versions in last 24h: ['0.26.1', '0.26.2', '0.26.3', '0.26.4', '0.26.5']",
    "repo_too_new_for_version_history": "claimed repo created 17d ago but package has 30 versions (expect >= 88d for that history)",
    "script_count_spike": "scripts count 8 -> 13",
    "shared_repo_different_publisher": "repo 'git+https://github.com/aexhq/aex.git' also claimed by 3 package(s) under different publishers: ['npm/@aexhq/contracts', 'npm/@aexhq/conformance', 'npm/@aexhq/cli']"
  },
  "time": {
    "created": "2026-06-05T08:34:51.193Z",
    "modified": "2026-06-21T15:43:27.794Z"
  }
}