npm @vibgrate/cli @2026.720.1

score

0.6667 med

flagged 2026-07-20 03:56

signals by category

content 2 topology 1

maintainers added: —

Signals fired

signal	weight	rationale
content
new_install_script	1.0	first time ['postinstall'] present
license_changed	0.4	'SEE LICENSE IN LICENSE' -> 'Apache-2.0'
topology
dependency_added_unknown	0.6	14 new non-watchlisted dep(s): ['@modelcontextprotocol/sdk', '@noble/hashes', 'gpt-tokenizer', 'graphology', 'graphology-communities-louvain'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "vibgrate-ops"
  ],
  "versions": 120
}

Evidence (package doc at flag time)

{
  "dependencies_count": 19,
  "dist": {
    "integrity": "sha512-F/dBcY6I2Ua6MHgrRkEEEgSifLCXy1TbH+LUvg0CEjJQW5Fod9M0wmvCF+XO5dApW4b/kaw6rzfcCFOvY3Xcqg==",
    "tarball": "https://registry.npmjs.org/@vibgrate/cli/-/cli-2026.720.1.tgz",
    "unpackedSize": 37028245
  },
  "dist-tags": {
    "latest": "2026.720.1"
  },
  "latest_version": "2026.720.1",
  "maintainers": [
    {
      "email": "ops@vibgrate.com",
      "name": "vibgrate-ops"
    }
  ],
  "num_versions": 151,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/vibgrate/cli.git"
  },
  "scripts": {
    "bench:literal": "tsx bench/literal-search.bench.ts",
    "build": "pnpm run bundle:grammars && tsup",
    "bundle:grammars": "node scripts/bundle-grammars.mjs",
    "check:pins": "node scripts/stamp-release-pins.mjs --check",
    "demo:svg": "node scripts/gen-demo-svg.mjs",
    "dev": "tsx src/cli.ts",
    "lint": "eslint src",
    "postinstall": "node scripts/postinstall.mjs",
    "stamp:pins": "node scripts/stamp-release-pins.mjs",
    "test": "vitest run",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "dependency_added_unknown": "14 new non-watchlisted dep(s): ['@modelcontextprotocol/sdk', '@noble/hashes', 'gpt-tokenizer', 'graphology', 'graphology-communities-louvain'] ...",
    "license_changed": "'SEE LICENSE IN LICENSE' -> 'Apache-2.0'",
    "new_install_script": "first time ['postinstall'] present"
  },
  "time": {
    "created": "2026-02-16T11:32:16.998Z",
    "modified": "2026-07-20T08:56:28.303Z"
  }
}