npm @aexhq/sdk @0.43.0

score

0.5932 med

flagged 2026-07-20 02:10

signals by category

content 1 topology 1

maintainers added: —

Signals fired

signal	weight	rationale
content
provenance_dropped	0.8	prior version published with SLSA attestation; current version has none
topology
dependency_added_unknown	0.6	1 new non-watchlisted dep(s): ['ignore']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "weilueluo"
  ],
  "versions": 30
}

Evidence (package doc at flag time)

{
  "dependencies_count": 2,
  "dist": {
    "integrity": "sha512-vtZODZ3VrAAQP4WfehKACR9CT+xz/iqnmhiogji+xFqTrJFodN4MBKcHXoby7HZPtLpPHIkd1pkxyill49t45w==",
    "tarball": "https://registry.npmjs.org/@aexhq/sdk/-/sdk-0.43.0.tgz",
    "unpackedSize": 1507788
  },
  "dist-tags": {
    "canary": "0.43.0-canary.29639181774.g31174c87f523",
    "dark": "0.13.6",
    "latest": "0.43.0"
  },
  "latest_version": "0.43.0",
  "maintainers": [
    {
      "email": "luoweilue@gmail.com",
      "name": "weilueluo"
    }
  ],
  "num_versions": 95,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/aexhq/aex.git"
  },
  "scripts": {
    "build": "bun ../../scripts/with-generated-dist-lock.mjs bun run build:unlocked",
    "build:unlocked": "bun ./scripts/clean-dist.mjs && bun run --cwd ../.. --filter @aexhq/contracts build && tsc -p tsconfig.build.json && bun run --cwd ../.. --filter @aexhq/cli build && bun ./scripts/bundle-cli.mjs && bun ./scripts/inline-contracts.mjs",
    "lint": "bun ../../scripts/with-generated-dist-lock.mjs bun run lint:unlocked",
    "lint:unlocked": "tsc --noEmit",
    "pack:dry-run": "bun ../../scripts/with-generated-dist-lock.mjs bun pm pack --dry-run --ignore-scripts",
    "prepack": "bun run build",
    "test": "bun run test:unit",
    "test:coverage": "vitest run --coverage test/unit",
    "test:property": "vitest run property",
    "test:security": "bun ../../scripts/with-generated-dist-lock.mjs bun run test:security:unlocked",
    "test:security:unlocked": "vitest run test/security",
    "test:unit": "bun ../../scripts/with-generated-dist-lock.mjs bun run test:unit:unlocked",
    "test:unit:unlocked": "vitest run test/unit"
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['ignore']",
    "provenance_dropped": "prior version published with SLSA attestation; current version has none"
  },
  "time": {
    "created": "2026-06-05T08:34:51.193Z",
    "modified": "2026-07-18T09:29:27.961Z"
  }
}