npm @cotal-ai/manager @0.11.3
score
0.5224
med
flagged
2026-07-12 13:17
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/Cotal-AI/Cotal.git' also claimed by 10 package(s) under different publishers: ['npm/@cotal-ai/connector-claude-code', 'npm/@cotal-ai/vercel-ai', 'npm/@cotal-ai/connector-codex'] ... |
| dependency_added_unknown | 0.6 | 4 new non-watchlisted dep(s): ['@cotal-ai/workspace', '@xterm/addon-serialize', '@xterm/headless', 'zod'] |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 40d ago but package has 23 versions (expect >= 81d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"cotal-ai"
],
"versions": 10
}
Evidence (package doc at flag time)
{
"dependencies_count": 11,
"dist": {
"integrity": "sha512-ZO4yiWknNH5aunrwRkoqq3HmMNwEOw+Uif2jpvXjDm5hyZ9OHF/mjrlrfl8bdhNT0vzwA/Hq1mi/5GjKD3rvaQ==",
"tarball": "https://registry.npmjs.org/@cotal-ai/manager/-/manager-0.11.3.tgz",
"unpackedSize": 291639
},
"dist-tags": {
"latest": "0.11.3",
"next": "0.2.1-next-20260614011207"
},
"latest_version": "0.11.3",
"maintainers": [
{
"email": "hello@swarl-ai.com",
"name": "cotal-ai"
}
],
"num_versions": 23,
"repository": {
"directory": "implementations/manager",
"type": "git",
"url": "https://github.com/Cotal-AI/Cotal.git"
},
"scripts": {
"build": "tsc -p tsconfig.json && node -e \"const fs=require('node:fs'); fs.rmSync('dist/console', { recursive: true, force: true }); fs.cpSync('src/console', 'dist/console', { recursive: true })\"",
"test": "tsx smoke/start-model-preflight.smoke.ts && tsx smoke/start-overrides.smoke.ts",
"typecheck": "tsc -p tsconfig.json --noEmit"
},
"signal_details": {
"dependency_added_unknown": "4 new non-watchlisted dep(s): ['@cotal-ai/workspace', '@xterm/addon-serialize', '@xterm/headless', 'zod']",
"repo_too_new_for_version_history": "claimed repo created 40d ago but package has 23 versions (expect >= 81d for that history)",
"shared_repo_different_publisher": "repo 'https://github.com/Cotal-AI/Cotal.git' also claimed by 10 package(s) under different publishers: ['npm/@cotal-ai/connector-claude-code', 'npm/@cotal-ai/vercel-ai', 'npm/@cotal-ai/connector-codex'] ..."
},
"time": {
"created": "2026-06-09T05:19:56.876Z",
"modified": "2026-07-12T11:04:12.248Z"
}
}