npm toolcraft @0.0.139
score
0.7079
high
flagged
2026-07-20 10:15
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/poe-platform/poe-code.git' also claimed by 10 package(s) under different publishers: ['npm/tokenfill', 'npm/terminal-png', 'npm/tiny-stdio-mcp-server'] ... |
| dependency_added_unknown | 0.6 | 3 new non-watchlisted dep(s): ['@poe-code/user-error', 'mcp-oauth-server', 'tiny-http-mcp-server'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"kamilio"
],
"versions": 64
}
Evidence (package doc at flag time)
{
"dependencies_count": 24,
"dist": {
"integrity": "sha512-yeSR3MKvWlnXuHHX50l56YMU4LuVk7AmBNpxOI0kT+JeR5tEZ+6Z8H/fI9cTfL2KDQNj/qW5YrCu9ZubpnRyjg==",
"tarball": "https://registry.npmjs.org/toolcraft/-/toolcraft-0.0.139.tgz",
"unpackedSize": 3666047
},
"dist-tags": {
"latest": "0.0.139"
},
"latest_version": "0.0.139",
"maintainers": [
{
"email": "kamil.jopek@gmail.com",
"name": "kamilio"
}
],
"num_versions": 133,
"repository": {
"directory": "packages/toolcraft",
"type": "git",
"url": "git+https://github.com/poe-platform/poe-code.git"
},
"scripts": {
"build": "rm -rf dist && tsc && cp src/composition.json dist/composition.json",
"lint": "cd ../.. && eslint packages/toolcraft/src --ext ts && tsc -p packages/toolcraft/tsconfig.json --noEmit",
"postpack": "node ../../scripts/manage-bundled-workspace-deps.mjs cleanup . toolcraft-schema toolcraft-design @poe-code/frontmatter @poe-code/agent-mcp-config @poe-code/agent-human-in-loop @poe-code/task-list @poe-code/agent-defs @poe-code/config-mutations @poe-code/user-error @poe-code/process-runner mcp-oauth-server tiny-http-mcp-server tiny-mcp-client tiny-stdio-mcp-server auth-store jose fast-string-width fast-wrap-ansi ignore jsonc-parser sisteransi smol-toml yaml",
"prepack": "node ../../scripts/manage-bundled-workspace-deps.mjs prepare . toolcraft-schema toolcraft-design @poe-code/frontmatter @poe-code/agent-mcp-config @poe-code/agent-human-in-loop @poe-code/task-list @poe-code/agent-defs @poe-code/config-mutations @poe-code/user-error @poe-code/process-runner mcp-oauth-server tiny-http-mcp-server tiny-mcp-client tiny-stdio-mcp-server auth-store jose fast-string-width fast-wrap-ansi ignore jsonc-parser sisteransi smol-toml yaml",
"test": "cd ../.. && vitest run packages/toolcraft/src",
"test:unit": "cd ../.. && vitest run packages/toolcraft/src"
},
"signal_details": {
"dependency_added_unknown": "3 new non-watchlisted dep(s): ['@poe-code/user-error', 'mcp-oauth-server', 'tiny-http-mcp-server']",
"shared_repo_different_publisher": "repo 'git+https://github.com/poe-platform/poe-code.git' also claimed by 10 package(s) under different publishers: ['npm/tokenfill', 'npm/terminal-png', 'npm/tiny-stdio-mcp-server'] ..."
},
"time": {
"created": "2026-04-23T16:09:59.016Z",
"modified": "2026-07-20T15:15:46.142Z"
}
}