BEACON

← candidates

npm hwjcode @1.1.48

score
0.7277 high
flagged 2026-06-22 10:08
signals by category
content 1 cadence 1 topology 1

maintainers added:

package profile →

Signals fired

signalweightrationale
content
install_script_payload 1.0 install/lifecycle script matches payload regex
cadence
rapid_release 0.8 7 versions in last 24h: ['1.1.44', '1.1.45', '1.1.46', '1.1.47', '1.1.48']
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/OrionStarAI/EasyCode.git' also claimed by 1 package(s) under different publishers: ['npm/easycode-ai']

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "hwj123weijian"
  ],
  "versions": 22
}

Evidence (package doc at flag time)

{
  "dependencies_count": 9,
  "dist": {
    "integrity": "sha512-6/+c8jhvDUK616m2D1DdHKQCgC0f68Vv2hVMej0Zy4a6mcJuq6ByvOLWvfpDP95paK1UAPsuGLWJyNev6Z4FTw==",
    "tarball": "https://registry.npmjs.org/hwjcode/-/hwjcode-1.1.48.tgz",
    "unpackedSize": 60732198
  },
  "dist-tags": {
    "latest": "1.1.48"
  },
  "latest_version": "1.1.48",
  "maintainers": [
    {
      "email": "3471547530@qq.com",
      "name": "hwj123weijian"
    }
  ],
  "num_versions": 23,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/OrionStarAI/EasyCode.git"
  },
  "scripts": {
    "auth": "npm run auth:npm && npm run auth:docker",
    "auth:docker": "gcloud auth configure-docker us-west1-docker.pkg.dev",
    "auth:npm": "npx google-artifactregistry-auth",
    "build": "node scripts/build.js",
    "build:all": "cross-env INCLUDE_VSCODE_PLUGIN=true npm run build && npm run build:sandbox && npm run build:vscode",
    "build:full": "cross-env INCLUDE_VSCODE_PLUGIN=true node scripts/build.js",
    "build:packages": "npm run build --workspaces",
    "build:sandbox": "node scripts/build_sandbox.js --skip-npm-install-build",
    "build:vscode": "node scripts/build_vscode_companion.js",
    "bundle": "npm run build && node esbuild.config.js && node scripts/copy_bundle_assets.js",
    "bundle:cross-platform:dev": "cross-env BUILD_ENV=development DOWNLOAD_ALL_PLATFORMS=true npm run build && cross-env BUILD_ENV=development node esbuild.config.js && cross-env BUILD_ENV=development DOWNLOAD_ALL_PLATFORMS=true node scripts/copy_bundle_assets.js",
    "bundle:cross-platform:full": "cross-env DOWNLOAD_ALL_PLATFORMS=true INCLUDE_VSCODE_PLUGIN=true npm run build:full && node esbuild.config.js && cross-env DOWNLOAD_ALL_PLATFORMS=true node scripts/copy_bundle_assets.js",
    "bundle:cross-platform:prod": "cross-env BUILD_ENV=production DOWNLOAD_ALL_PLATFORMS=true npm run build && cross-env BUILD_ENV=production node esbuild.config.js && cross-env BUILD_ENV=production DOWNLOAD_ALL_PLATFORMS=true node scripts/copy_bundle_assets.js",
    "bundle:dev": "cross-env BUILD_ENV=development npm run build && cross-env BUILD_ENV=development node esbuild.config.js && cross-env BUILD_ENV=development node scripts/copy_bundle_assets.js",
    "bundle:full": "cross-env INCLUDE_VSCODE_PLUGIN=true npm run build:full && node esbuild.config.js && node scripts/copy_bundle_assets.js",
    "bundle:prod": "cross-env BUILD_ENV=production npm run build && cross-env BUILD_ENV=production node esbuild.config.js && cross-env BUILD_ENV=production DOWNLOAD_ALL_PLATFORMS=true node scripts/copy_bundle_assets.js",
    "clean": "node scripts/clean.js",
    "debug": "cross-env DEBUG=1  DEEPX_SERVER_URL=https://api-code.deepvlab.ai DEEPX_WEB_URL=https://dvcode.deepvlab.ai node --inspect-brk scripts/start.js",
    "desktop:build": "npm run build --workspace=packages/desktop",
    "desktop:dev": "cross-env DEEPX_SERVER_URL=https://api-code.deepvlab.ai DEEPX_WEB_URL=https://dvcode.deepvlab.ai npm run bundle:dev && cross-env DEEPX_SERVER_URL=https://api-code.deepvlab.ai DEEPX_WEB_URL=https://dvcode.deepvlab.ai npm run dev --workspace=packages/desktop",
    "desktop:pack:mac": "npm run pack:desktop:mac",
    "desktop:pack:mac:notarize": "node packages/desktop/scripts/interactive-build.cjs",
    "desktop:pack:win": "npm run pack:desktop:win",
    "desktop:start:prod": "cross-env BUILD_ENV=production npm run bundle && npm run start --workspace=packages/desktop",
    "dev": "cross-env FILE_DEBUG=1 LOG_TO_FILE=true DEEPX_SERVER_URL=https://api-code.deepvlab.ai DEEPX_WEB_URL=https://dvcode.deepvlab.ai node scripts/start.js",
    "env:development": "./scripts/switch-env.sh development",
    "env:production": "./scripts/switch-env.sh production",
    "env:test": "./scripts/switch-env.sh test",
    "format": "prettier --write .",
    "generate": "node scripts/generate-git-commit-info.js",
    "lint": "eslint . --ext .ts,.tsx && eslint integration-tests",
    "lint:ci": "eslint . --ext .ts,.tsx --max-warnings 0 && eslint integration-tests --max-warnings 0",
    "lint:fix": "eslint . --fix && eslint integration-tests --fix",
    "pack:desktop": "cross-env BUILD_ENV=production DOWNLOAD_ALL_PLATFORMS=true npm run bundle && npm run pack:all --workspace=packages/desktop",
    "pack:desktop:linux": "cross-env BUILD_ENV=production npm run bundle && npm run pack:linux --workspace=packages/desktop",
    "pack:desktop:mac": "cross-env BUILD_ENV=production npm run bundle && npm run pack:mac --workspace=packages/desktop",
    "pack:desktop:win": "cross-env BUILD_ENV=production npm run bundle && npm run pack:win --workspace=packages/desktop",
    "pack:dev": "cross-env ENABLE_CHECKPOINTING=true npm run bundle:cross-platform:dev && cross-env BUILD_ENV=development ENABLE_CHECKPOINTING=true node scripts/newpack.js",
    "pack:full": "cross-env ENABLE_CHECKPOINTING=true npm run bundle:cross-platform:full && cross-env ENABLE_CHECKPOINTING=true node scripts/newpack.js",
    "pack:mac:dmg": "node packages/desktop/scripts/interactive-build.cjs",
    "pack:prod": "cross-env ENABLE_CHECKPOINTING=true npm run bundle:cross-platform:prod && cross-env BUILD_ENV=production ENABLE_CHECKPOINTING=true node scripts/newpack.js",
    "pack:prod:ci": "cross-env ENABLE_CHECKPOINTING=true npm run bundle:cross-platform:prod && cross-env BUILD_ENV=production ENABLE_CHECKPOINTING=true node scripts/newpack.js -- --no-version-bump",
    "pack:vscode": "npm run package --workspace=packages/vscode-ui-plugin && copy packages\\vscode-ui-plugin\\*.vsix .",
    "package": "npm run package --workspace=packages/vscode-ui-plugin",
    "postinstall": "node -e \"const fs = require('fs'); const path = 'bundle/fix-binary-permissions.js'; if (fs.existsSync(path)) { require('child_process').execSync('node ' + path + ' --all', {stdio: 'inherit'}); } else { console.log('\u23ed\ufe0f  Skipping binary permissions fix (bundle not built yet)'); }\"",
    "postpublish": "node scripts/restore-after-publish.js",
    "preflight": "npm run clean && npm ci && npm run format && npm run lint:ci && npm run build && npm run typecheck && npm run test:ci",
    "prepare": "node scripts/prepare.js",
    "prepare:package": "node scripts/prepare-package.js",
    "prepublishOnly": "node scripts/prepare-publish.js && cross-env BUILD_ENV=production NPM_PUBLISH_MODE=1 npm run bundle:prod",
    "release:version": "node scripts/version.js",
    "start": "node scripts/start.js",
    "sync-upstream": "bash scripts/sync-upstream.sh",
    "telemetry": "node scripts/telemetry.js",
    "test": "npm run test --workspaces",
    "test:ci": "npm run test:ci --workspaces --if-present && npm run test:scripts",
    "test:e2e": "npm run test:integration:sandbox:none -- --verbose --keep-output",
    "test:integration:all": "npm run test:integration:sandbox:none && npm run test:integration:sandbox:docker && npm run test:integration:sandbox:podman",
    "test:integration:sandbox:docker": "GEMINI_SANDBOX=docker node integration-tests/run-tests.js",
    "test:integration:sandbox:none": "GEMINI_SANDBOX=false node integration-tests/run-tests.js",
    "test:integration:sandbox:podman": "GEMINI_SANDBOX=podman node integration-tests/run-tests.js",
    "test:scripts": "vitest run --config ./scripts/tests/vitest.config.ts",
    "typecheck": "npm run typecheck --workspaces --if-present"
  },
  "signal_details": {
    "install_script_payload": "install/lifecycle script matches payload regex",
    "rapid_release": "7 versions in last 24h: ['1.1.44', '1.1.45', '1.1.46', '1.1.47', '1.1.48']",
    "shared_repo_different_publisher": "repo 'git+https://github.com/OrionStarAI/EasyCode.git' also claimed by 1 package(s) under different publishers: ['npm/easycode-ai']"
  },
  "time": {
    "created": "2026-06-16T17:07:40.363Z",
    "modified": "2026-06-22T11:13:18.886Z"
  }
}