npm omnikey-cli @1.6.0
score
0.5809
med
flagged
2026-06-05 04:49
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| script_count_spike | 0.5 | scripts count 3 -> 8 |
| provenance_dropped | 0.8 | prior version published with SLSA attestation; current version has none |
| topology | ||
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['node-telegram-bot-api'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"gurinderrawala"
],
"versions": 52
}
Evidence (package doc at flag time)
{
"dependencies_count": 23,
"dist": {
"integrity": "sha512-eKSjsWePgzrzZQNJxZMIH1EYVmK6f+ql5eBnGOFLN2XPOYQ4Vm31qUH01UH4+A/Yy05omMGIJVZ/4EasN2GfPg==",
"tarball": "https://registry.npmjs.org/omnikey-cli/-/omnikey-cli-1.6.0.tgz",
"unpackedSize": 665838
},
"dist-tags": {
"latest": "1.6.0"
},
"latest_version": "1.6.0",
"maintainers": [
{
"email": "gurinderrawala@gmail.com",
"name": "gurinderrawala"
}
],
"num_versions": 59,
"repository": {
"type": "git",
"url": "git+https://github.com/GurinderRawala/OmniKey-AI.git"
},
"scripts": {
"build": "tsc && yarn run copy-backend && yarn run build:telegram-client",
"build:telegram-client": "rm -rf telegram-client-dist && mkdir -p telegram-client-dist && cp -R ../telegram/dist/* telegram-client-dist/",
"clean": "rm -rf dist backend-dist telegram-client-dist",
"copy-backend": "rm -rf backend-dist && mkdir -p backend-dist && cp -R ../api/dist/* backend-dist/",
"format": "prettier --write \"src/**/*.ts\"",
"lint": "echo \"(no lint in this workspace)\" && exit 0",
"start": "node dist/index.js",
"test": "echo \"(no tests in this workspace)\" && exit 0"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['node-telegram-bot-api']",
"provenance_dropped": "prior version published with SLSA attestation; current version has none",
"script_count_spike": "scripts count 3 -> 8"
},
"time": {
"created": "2026-03-16T03:31:30.835Z",
"modified": "2026-06-05T02:30:14.770Z"
}
}