npm decocms @4.76.69
score
0.7667
high
flagged
2026-07-20 05:54
Signals fired
| signal | weight | rationale |
|---|---|---|
| cadence | ||
| rapid_release | 0.8 | 31 versions in last 24h: ['4.76.65', '4.76.66', '4.76.67', '4.76.68', '4.76.69'] |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/decocms/studio.git' also claimed by 6 package(s) under different publishers: ['npm/@decocms/bindings', 'npm/@decocms/mesh-sdk', 'npm/@decocms/mcp-utils'] ... |
| dependency_added_unknown | 0.6 | 3 new non-watchlisted dep(s): ['@tiptap/extension-text-align', 'echarts', 'use-stick-to-bottom'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"camudo"
],
"versions": 1225
}
Evidence (package doc at flag time)
{
"dependencies_count": 35,
"dist": {
"integrity": "sha512-+fpDllvsfwjdjNJOmRYhup4KG/3jmyG6SPsstncBCiC3/07dP9uJppMT2+xYS7CeHL6MqxPTfategefqTMC8hw==",
"tarball": "https://registry.npmjs.org/decocms/-/decocms-4.76.69.tgz",
"unpackedSize": 93737685
},
"dist-tags": {
"latest": "4.76.69",
"next": "2.281.4-alpha.1"
},
"latest_version": "4.76.69",
"maintainers": [
{
"email": "viktor@deco.cx",
"name": "camudo"
}
],
"num_versions": 1547,
"repository": {
"directory": "apps/mesh",
"type": "git",
"url": "git+https://github.com/decocms/studio.git"
},
"scripts": {
"better-auth:migrate": "bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts",
"build:client": "bun --bun vite build",
"build:server": "bun run scripts/bundle-server-script.ts --dist ./dist/server",
"check": "tsc --noEmit",
"db:migrate": "bun run ./dist/server/migrate.js",
"dev": "bun run migrate && concurrently \"bun run dev:client\" \"bun run dev:server\"",
"dev:client": "vite dev",
"dev:server": "bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts",
"dev:servers": "concurrently \"bun run dev:client\" \"bun run dev:server\"",
"migrate": "bun run src/database/migrate.ts",
"prepublishOnly": "bun run build:client && bun run build:server",
"smoke:link": "bun run scripts/smoke-link.ts",
"start": "bun run ./dist/server/server.js",
"test": "bun test",
"test:ct": "playwright test -c playwright-ct.config.ts",
"test:ct:ui": "playwright test -c playwright-ct.config.ts --ui"
},
"signal_details": {
"dependency_added_unknown": "3 new non-watchlisted dep(s): ['@tiptap/extension-text-align', 'echarts', 'use-stick-to-bottom']",
"rapid_release": "31 versions in last 24h: ['4.76.65', '4.76.66', '4.76.67', '4.76.68', '4.76.69']",
"shared_repo_different_publisher": "repo 'git+https://github.com/decocms/studio.git' also claimed by 6 package(s) under different publishers: ['npm/@decocms/bindings', 'npm/@decocms/mesh-sdk', 'npm/@decocms/mcp-utils'] ..."
},
"time": {
"created": "2025-08-22T13:13:41.197Z",
"modified": "2026-07-20T10:54:08.615Z"
}
}