npm @finos/calm-cli @1.49.0

score

0.7408 high

flagged 2026-07-20 09:32

signals by category

topology 2

maintainers added: —

Signals fired

signal	weight	rationale
topology
shared_repo_different_publisher	0.9	repo 'git+https://github.com/finos/architecture-as-code.git' also claimed by 1 package(s) under different publishers: ['npm/@finos/calm-server']
dependency_added_unknown	0.6	1 new non-watchlisted dep(s): ['tree-dump']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "finos-admin",
    "maoo",
    "texodus",
    "neil.slinger"
  ],
  "versions": 90
}

Evidence (package doc at flag time)

{
  "dependencies_count": 12,
  "dist": {
    "integrity": "sha512-IuiUcZ+lQMEnlhInXGzQQoAHbgUvQ1rnFlI5UKafergQYIVyhYJIeVANtw4La5KlzaplKEdBAoKn40beyM+36A==",
    "tarball": "https://registry.npmjs.org/@finos/calm-cli/-/calm-cli-1.49.0.tgz",
    "unpackedSize": 4867794
  },
  "dist-tags": {
    "latest": "1.49.0"
  },
  "latest_version": "1.49.0",
  "maintainers": [
    {
      "email": "infra@finos.org",
      "name": "finos-admin"
    },
    {
      "email": "maurizio@session.it",
      "name": "maoo"
    },
    {
      "email": "steinlink@gmail.com",
      "name": "texodus"
    },
    {
      "email": "neil.slinger@gmail.com",
      "name": "neil.slinger"
    }
  ],
  "num_versions": 94,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/finos/architecture-as-code.git"
  },
  "scripts": {
    "build": "tsup && npm run copy-calm-schema && npm run copy-docify-templates && npm run copy-widgets && npm run copy-ai-tools && npm run copy-workspace-templates",
    "copy-ai-tools": "copyfiles \"../calm-ai/tools/**/*\" \"../calm-ai/ai-assistants/**/*\" \"../calm-ai/templates/**/*\" dist/calm-ai/ --up 2",
    "copy-calm-schema": "copyfiles \"../calm/release/**/meta/*\" \"../calm/draft/**/meta/*\" dist/calm/",
    "copy-docify-templates": "copyfiles \"../shared/dist/template-bundles/**/*\" dist --up 3",
    "copy-widgets": "copyfiles \"../calm-widgets/dist/cli/widgets/**/*\" dist --up 4",
    "copy-workspace-templates": "copyfiles \"src/command-helpers/workspace/templates/**/*\" dist/ --up 3",
    "dependency-check": "dependency-check --project 'calm-cli' --scan . --out ./dependency-check-report --format ALL --suppression ../.github/node-cve-ignore-list.xml",
    "lint": "eslint src",
    "lint-fix": "eslint src --fix",
    "semantic-release": "semantic-release",
    "test": "vitest run",
    "test:smoke": "vitest run --config vitest.smoke.mts",
    "watch": "node watch.mjs"
  },
  "signal_details": {
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['tree-dump']",
    "shared_repo_different_publisher": "repo 'git+https://github.com/finos/architecture-as-code.git' also claimed by 1 package(s) under different publishers: ['npm/@finos/calm-server']"
  },
  "time": {
    "created": "2024-06-03T12:55:47.873Z",
    "modified": "2026-07-15T11:46:21.027Z"
  }
}