npm creem @1.5.2
score
0.7238
high
flagged
2026-06-22 11:03
Signals fired
| signal | weight | rationale |
|---|---|---|
| cadence | ||
| rapid_release | 0.8 | 3 versions in last 24h: ['1.5.0', '1.5.1', '1.5.2'] |
| topology | ||
| typosquat | 1.0 | lev=1 to watched 'creek' |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/armitage-labs/creem.git' also claimed by 6 package(s) under different publishers: ['npm/@creem_io/embed', 'npm/@creem_io/svelte', 'npm/@creem_io/vue'] ... |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 88d ago but package has 32 versions (expect >= 90d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"creem.samuel",
"vumck",
"gabriel_creem",
"alecerasmus"
],
"versions": 31
}
Evidence (package doc at flag time)
{
"dependencies_count": 3,
"dist": {
"integrity": "sha512-p36KAaIPsOfrRVZ6EBkqhqVM3DYnrr6sTBlFc/L1oR8LNo0tOS4G0LXu6DejviEpXGU0MX7QwpyvdeFlPQj4Hw==",
"tarball": "https://registry.npmjs.org/creem/-/creem-1.5.2.tgz",
"unpackedSize": 11205888
},
"dist-tags": {
"latest": "1.5.2"
},
"latest_version": "1.5.2",
"maintainers": [
{
"email": "samuel@creem.io",
"name": "creem.samuel"
},
{
"email": "vk@creem.io",
"name": "vumck"
},
{
"email": "gabriel@creem.io",
"name": "gabriel_creem"
},
{
"email": "alec@creem.io",
"name": "alecerasmus"
}
],
"num_versions": 32,
"repository": {
"directory": "packages/creem-sdk",
"type": "git",
"url": "git+https://github.com/armitage-labs/creem.git"
},
"scripts": {
"build": "npm run build:mcp && tshy",
"build:mcp": "bun src/mcp-server/build.mts",
"lint": "eslint --cache --max-warnings=0 src",
"prepublishOnly": "npm run build",
"test": "vitest run",
"test:watch": "vitest"
},
"signal_details": {
"rapid_release": "3 versions in last 24h: ['1.5.0', '1.5.1', '1.5.2']",
"repo_too_new_for_version_history": "claimed repo created 88d ago but package has 32 versions (expect >= 90d for that history)",
"shared_repo_different_publisher": "repo 'git+https://github.com/armitage-labs/creem.git' also claimed by 6 package(s) under different publishers: ['npm/@creem_io/embed', 'npm/@creem_io/svelte', 'npm/@creem_io/vue'] ...",
"typosquat": "lev=1 to watched 'creek'"
},
"time": {
"created": "2025-04-03T00:07:02.901Z",
"modified": "2026-06-22T16:03:05.084Z"
}
}