npm borgmcp @2.0.1
score
0.55
med
flagged
2026-07-20 09:06
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| license_changed | 0.4 | 'SEE LICENSE IN LICENSE' -> 'Apache-2.0' |
| size_spike | 0.5 | unpackedSize 665993 -> 2918029 (4.4×) |
| topology | ||
| repository_url_changed | 0.7 | 'git+https://github.com/Byte-Ventures/borg-mcp.git' -> 'git+https://github.com/Byte-Ventures/borg-mcp-client.git' |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['borgmcp-shared'] |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"byteventures"
],
"versions": 167
}
Evidence (package doc at flag time)
{
"dependencies_count": 5,
"dist": {
"integrity": "sha512-Ah8IY2izZ774gYLKthRL9lfrV+JBk2o9HSlrWUplyZgoGqwVjVboHNon0hWWF5i/fObiCGikFOMY6qZ+vaeyCw==",
"tarball": "https://registry.npmjs.org/borgmcp/-/borgmcp-2.0.1.tgz",
"unpackedSize": 2918029
},
"dist-tags": {
"beta": "0.2.0-beta.11",
"latest": "2.0.1",
"next": "0.4.2"
},
"latest_version": "2.0.1",
"maintainers": [
{
"email": "theodor@byteventures.se",
"name": "byteventures"
}
],
"num_versions": 173,
"repository": {
"type": "git",
"url": "git+https://github.com/Byte-Ventures/borg-mcp-client.git"
},
"scripts": {
"build": "npm run clean && tsc -p tsconfig.json && node scripts/set-bin-mode.mjs",
"check": "tsc -p tsconfig.json --noEmit",
"clean": "node scripts/clean.mjs",
"dev": "tsc -p tsconfig.json --watch",
"onboarding:smoke": "node scripts/onboarding-smoke.mjs",
"release:check": "npm run verify:public-source && npm run verify:release && npm run verify:lock && npm run check && npm test && npm run build && npm run onboarding:smoke && npm run verify:package",
"start": "node dist/index.js",
"test": "npm run test:unit && npm run test:release",
"test:release": "node --test test/release-lane.test.mjs",
"test:unit": "vitest run --config vitest.config.ts",
"verify:artifact": "node scripts/verify-packed-artifact.mjs",
"verify:lock": "node scripts/verify-lock-registry.mjs",
"verify:package": "node scripts/verify-local-package.mjs",
"verify:public-source": "node scripts/verify-public-source.mjs",
"verify:release": "node scripts/verify-release-readiness.mjs"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['borgmcp-shared']",
"license_changed": "'SEE LICENSE IN LICENSE' -> 'Apache-2.0'",
"repository_url_changed": "'git+https://github.com/Byte-Ventures/borg-mcp.git' -> 'git+https://github.com/Byte-Ventures/borg-mcp-client.git'",
"size_spike": "unpackedSize 665993 -> 2918029 (4.4\u00d7)"
},
"time": {
"created": "2025-10-23T19:38:19.633Z",
"modified": "2026-07-20T14:06:22.676Z"
}
}