npm @aion0/forge @0.15.15

score

0.65 med

flagged 2026-07-10 23:50

signals by category

content 2 cadence 1 topology 1

maintainers added: —

Signals fired

signal	weight	rationale
content
new_install_script	1.0	first time ['postinstall'] present
script_count_spike	0.5	scripts count 6 -> 13
cadence
rapid_release	0.8	3 versions in last 24h: ['0.15.13', '0.15.14', '0.15.15']
topology
no_repo	0.3	package.json has no repository field

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "aion0"
  ],
  "versions": 232
}

Evidence (package doc at flag time)

{
  "dependencies_count": 30,
  "dist": {
    "integrity": "sha512-VHcnsgNwRRT0C5QBdLaDvuCfeDspKVTSw2nCZ8bs2oHGCXe1tiVfAbV6TcfAXUaNDpo5zHuS2MZ+Ukj7cdxSmQ==",
    "tarball": "https://registry.npmjs.org/@aion0/forge/-/forge-0.15.15.tgz",
    "unpackedSize": 7636326
  },
  "dist-tags": {
    "latest": "0.15.15"
  },
  "latest_version": "0.15.15",
  "maintainers": [
    {
      "email": "aiwatching2024@gmail.com",
      "name": "aion0"
    }
  ],
  "num_versions": 257,
  "repository": null,
  "scripts": {
    "build": "next build",
    "build:cli": "esbuild cli/mw.ts --bundle --platform=node --format=esm --target=node18 --outfile=cli/mw.mjs --banner:js='#!/usr/bin/env node' --external:better-sqlite3 --external:node-pty && chmod +x cli/mw.mjs",
    "check:reclaim": "node scripts/check-unsafe-reclaim.mjs .",
    "check:unsafe": "node scripts/check-unsafe-exec.mjs .",
    "dev": "next dev --turbopack",
    "forge": "npx tsx cli/mw.ts",
    "lint": "eslint app lib cli",
    "lint:strict": "eslint app/api --max-warnings 0",
    "postinstall": "node bin/setup-browser.mjs --postinstall",
    "prepack": "npm run build:cli",
    "start": "next start",
    "test:reclaim": "npx tsx lib/__tests__/safe-reclaim.test.ts && npx tsx lib/__tests__/cloudflared-identity.test.ts && npx tsx lib/__tests__/tmux-safe.test.ts && node scripts/__tests__/check-unsafe-reclaim.test.mjs && node bin/__tests__/reap-identity.test.mjs",
    "test:security": "npx tsx scripts/security/injection.test.ts"
  },
  "signal_details": {
    "new_install_script": "first time ['postinstall'] present",
    "no_repo": "package.json has no repository field",
    "rapid_release": "3 versions in last 24h: ['0.15.13', '0.15.14', '0.15.15']",
    "script_count_spike": "scripts count 6 -> 13"
  },
  "time": {
    "created": "2026-03-13T21:40:35.284Z",
    "modified": "2026-07-10T23:10:45.066Z"
  }
}