npm cli-jaw @2.2.7
score
0.5667
med
flagged
2026-07-15 16:41
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| script_count_spike | 0.5 | scripts count 67 -> 78 |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=2.2.7 but max published is 2.2.8-preview.20260711123136 |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 140d ago but package has 226 versions (expect >= 141d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"bitkyc08"
],
"versions": 211
}
Evidence (package doc at flag time)
{
"dependencies_count": 48,
"dist": {
"integrity": "sha512-d/mGrUkIpvCXRbay04TmT4NH9oLe67awGY8QjZUxqrEon9U/7LoxiDDVjpUrJekhkdT99hqN/Q/snd+mxfZiVA==",
"tarball": "https://registry.npmjs.org/cli-jaw/-/cli-jaw-2.2.7.tgz",
"unpackedSize": 22277709
},
"dist-tags": {
"latest": "2.2.7",
"preview": "2.2.8-preview.20260711123136"
},
"latest_version": "2.2.7",
"maintainers": [
{
"email": "bitkyc08@gmail.com",
"name": "bitkyc08"
}
],
"num_versions": 226,
"repository": {
"type": "git",
"url": "git+https://github.com/lidge-jun/cli-jaw.git"
},
"scripts": {
"audit:fresh-install-evidence": "node scripts/audit-fresh-install-evidence.mjs",
"build": "bash scripts/atomic-build.sh",
"build:claude-e": "cargo build --release --manifest-path native/claude-e/Cargo.toml",
"build:claude-exec": "npm run build:claude-e",
"build:frontend": "vite build --config vite.config.ts",
"check:app-icons": "node scripts/check-app-icon-assets.cjs",
"check:cli-bin-links": "node scripts/check-cli-bin-links.cjs",
"check:copilot-gap": "tsx scripts/check-copilot-gap.ts",
"check:deps": "tsx scripts/check-deps-offline.ts",
"check:deps:online": "bash scripts/check-deps-online.sh",
"check:electron-dist-linux-no-jwc": "node scripts/check-electron-sidecar-no-jwc.cjs --server-root electron/dist/linux-unpacked/resources/server",
"check:electron-dist-mac-no-jwc": "node scripts/check-electron-sidecar-no-jwc.cjs --server-root electron/dist/mac-arm64/cli-jaw.app/Contents/Resources/server",
"check:electron-dist-win-no-jwc": "node scripts/check-electron-sidecar-no-jwc.cjs --server-root electron/dist/win-unpacked/resources/server",
"check:electron-no-native": "node scripts/check-electron-no-native.cjs",
"check:electron-sidecar-no-jwc": "node scripts/check-electron-sidecar-no-jwc.cjs",
"check:frontend-build-output": "tsx scripts/check-web-ui-build-output.ts",
"check:strict-baseline": "node scripts/check-strict-baseline.mjs",
"clean:dist": "node -e \"const fs=require('fs');fs.rmSync('dist',{recursive:true,force:true});\"",
"collect:fresh-install-evidence": "bash scripts/collect-fresh-install-evidence.sh",
"dev": "tsx --env-file=.env server.ts",
"dev:frontend": "vite --config vite.config.ts",
"docs:check": "tsx scripts/docs/check-docs.mts",
"electron:build": "npm --prefix electron run build",
"electron:dev": "concurrently -k -n jaw,electron \"node scripts/electron-dev-manager.mjs\" \"npm --prefix electron run dev\"",
"electron:dist:mac": "npm run build:frontend && npm run sidecar:bundle && npm --prefix electron run build && CSC_IDENTITY_AUTO_DISCOVERY=false npm --prefix electron run dist:mac && npm run electron:resign:mac && npm run check:electron-dist-mac-no-jwc && npm run check:app-icons",
"electron:resign:mac": "codesign --force --deep --sign - electron/dist/mac-arm64/cli-jaw.app",
"electron:start": "npm --prefix electron run start",
"ensure:native": "node scripts/ensure-native-modules.cjs",
"gate:action-memory-safe-replay": "node scripts/release-gates.mjs action-memory-safe-replay",
"gate:all": "node scripts/release-gates.mjs",
"gate:browser-primitives-catalog": "node scripts/release-gates.mjs browser-primitives-catalog",
"gate:doc-drift": "node scripts/release-gates.mjs doc-drift",
"gate:mcp-scope-frozen": "node scripts/release-gates.mjs mcp-scope-frozen",
"gate:model-adapter-frozen": "node scripts/release-gates.mjs model-adapter-frozen",
"gate:no-cloud-claims": "node scripts/release-gates.mjs no-cloud-claims",
"gate:no-experimental-in-readme-ready-section": "node scripts/release-gates.mjs no-experimental-in-readme-ready-section",
"gate:observation-bundle-fixtures": "node scripts/release-gates.mjs observation-bundle-fixtures",
"gate:observe-actions-fixtures": "node scripts/release-gates.mjs observe-actions-fixtures",
"gate:strict-baseline": "node scripts/release-gates.mjs strict-baseline",
"gate:tests": "node scripts/release-gates.mjs tests",
"gate:truth-table-fresh": "node scripts/release-gates.mjs truth-table-fresh",
"gate:typecheck": "node scripts/release-gates.mjs typecheck",
"gate:workflow-common-layer-no-sdk": "node scripts/release-gates.mjs workflow-common-layer-no-sdk",
"i18n:registry": "tsx scripts/i18n-registry.ts",
"postbuild": "node scripts/link-current-nvm-bin.cjs",
"postinstall": "node scripts/postinstall-guard.cjs",
"prebuild": "npm run ensure:native",
"prepublishOnly": "npm run build && npm run build:frontend && npm run check:frontend-build-output",
"pretest": "npm run ensure:native",
"pretest:all": "npm run ensure:native",
"pretest:integration": "npm run ensure:native",
"pretest:smoke": "npm run ensure:native",
"preview:frontend": "vite preview --config vite.config.ts",
"qa:manager-frontend": "npm run build:frontend && npm run typecheck:frontend",
"rebuild:native": "npm rebuild better-sqlite3",
"sidecar:bundle": "bash scripts/bundle-sidecar.sh darwin arm64",
"smoke:jwc:no-global": "node scripts/jwc-no-global-smoke.mjs",
"smoke:opencode": "tsx scripts/smoke/opencode-external-dir-smoke.ts",
"smoke:tui-fullscreen": "tsx scripts/smoke/tui-fullscreen-frame-smoke.ts",
"test": "tsx --experimental-test-module-mocks tests/run.mts",
"test:all": "tsx --experimental-test-module-mocks tests/run.mts --all",
"test:claude-e": "cargo test --manifest-path native/claude-e/Cargo.toml",
"test:claude-exec": "npm run test:claude-e",
"test:coverage": "tsx --experimental-test-module-mocks --experimental-test-coverage tests/run.mts --all",
"test:events": "tsx --test tests/events.test.ts",
"test:fresh-install": "tsx scripts/fresh-install-smoke.ts",
"test:install-risk": "node scripts/install-risk-gate.mjs",
"test:integration": "tsx --experimental-test-module-mocks --test tests/integration/*.test.ts",
"test:manager:browser": "tsx --test tests/browser/manager-layout-smoke.test.ts",
"test:smoke": "TEST_PORT=3457 tsx --test tests/integration/api-smoke.test.ts",
"test:telegram": "tsx --test tests/telegram-forwarding.test.ts",
"test:waf": "WAF_TEST_ENABLED=1 npx tsx tests/waf/waf-runner.ts",
"test:watch": "tsx --experimental-test-module-mocks tests/run.mts --watch",
"test:web-ui-runtime": "tsx --import ./tests/setup/test-home.ts --experimental-test-module-mocks --test tests/unit/web-ui-runtime-*.test.ts tests/unit/web-ui-processblock-runtime.test.ts tests/unit/web-ui-mermaid-runtime.test.ts tests/unit/web-ui-sanitizer.test.ts tests/unit/web-ui-build-output-guard.test.ts",
"typecheck": "tsc --noEmit",
"typecheck:frontend": "tsc --noEmit -p tsconfig.frontend.json",
"verify:fresh-install": "bash scripts/verify-fresh-install.sh",
"verify:release-evidence": "node scripts/verify-release-evidence.mjs"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=2.2.7 but max published is 2.2.8-preview.20260711123136",
"repo_too_new_for_version_history": "claimed repo created 140d ago but package has 226 versions (expect >= 141d for that history)",
"script_count_spike": "scripts count 67 -> 78"
},
"time": {
"created": "2026-02-25T09:57:40.740Z",
"modified": "2026-07-11T03:34:04.315Z"
}
}