npm @hachej/boring-core @0.1.89
score
0.6741
med
flagged
2026-07-20 08:29
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/hachej/boring-ui.git' also claimed by 10 package(s) under different publishers: ['npm/@hachej/boring-ask-user', 'npm/@hachej/boring-data-catalog', 'npm/@hachej/boring-deck'] ... |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['@fastify/proxy-addr'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"hachej"
],
"versions": 45
}
Evidence (package doc at flag time)
{
"dependencies_count": 30,
"dist": {
"integrity": "sha512-q7g7UFhc5u2K+rQumf0A3fl6M8HsnKqh973t7EQO8uZWsCDQ9Do/uYyYXxjsmHO3+JLNE1uoEGiN+uTbaqda/Q==",
"tarball": "https://registry.npmjs.org/@hachej/boring-core/-/boring-core-0.1.89.tgz",
"unpackedSize": 968701
},
"dist-tags": {
"latest": "0.1.89"
},
"latest_version": "0.1.89",
"maintainers": [
{
"email": "julien.hurault@sumeo.io",
"name": "hachej"
}
],
"num_versions": 81,
"repository": {
"type": "git",
"url": "git+https://github.com/hachej/boring-ui.git"
},
"scripts": {
"auth:generate-schema": "BETTER_AUTH_SCHEMA_GEN=1 npx @better-auth/cli generate --config src/server/auth/schema-config.ts --output drizzle/ --yes || BETTER_AUTH_SCHEMA_GEN=1 npx @better-auth/cli generate --config src/server/auth/schema-config.ts --output drizzle/schema.ts --yes",
"build": "tsup && pnpm run build:assert",
"build:assert": "node ./scripts/assert-build-artifacts.mjs",
"check:bundle-size": "tsx ./scripts/check-bundle-size.ts",
"clean": "rm -rf dist .tsbuildinfo",
"dev": "tsup --watch",
"drizzle:generate": "drizzle-kit generate --config drizzle.config.ts",
"drizzle:migrate": "drizzle-kit migrate --config drizzle.config.ts",
"lint": "pnpm run typecheck",
"test": "vitest run --no-file-parallelism",
"test:watch": "vitest",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['@fastify/proxy-addr']",
"shared_repo_different_publisher": "repo 'git+https://github.com/hachej/boring-ui.git' also claimed by 10 package(s) under different publishers: ['npm/@hachej/boring-ask-user', 'npm/@hachej/boring-data-catalog', 'npm/@hachej/boring-deck'] ..."
},
"time": {
"created": "2026-05-07T08:03:52.816Z",
"modified": "2026-07-17T14:34:31.325Z"
}
}