BEACON

← candidates

npm toolcraft @0.0.139

score
0.7079 high
flagged 2026-07-20 10:15
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/poe-platform/poe-code.git' also claimed by 10 package(s) under different publishers: ['npm/tokenfill', 'npm/terminal-png', 'npm/tiny-stdio-mcp-server'] ...
dependency_added_unknown 0.6 3 new non-watchlisted dep(s): ['@poe-code/user-error', 'mcp-oauth-server', 'tiny-http-mcp-server']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "kamilio"
  ],
  "versions": 64
}

Evidence (package doc at flag time)

{
  "dependencies_count": 24,
  "dist": {
    "integrity": "sha512-yeSR3MKvWlnXuHHX50l56YMU4LuVk7AmBNpxOI0kT+JeR5tEZ+6Z8H/fI9cTfL2KDQNj/qW5YrCu9ZubpnRyjg==",
    "tarball": "https://registry.npmjs.org/toolcraft/-/toolcraft-0.0.139.tgz",
    "unpackedSize": 3666047
  },
  "dist-tags": {
    "latest": "0.0.139"
  },
  "latest_version": "0.0.139",
  "maintainers": [
    {
      "email": "kamil.jopek@gmail.com",
      "name": "kamilio"
    }
  ],
  "num_versions": 133,
  "repository": {
    "directory": "packages/toolcraft",
    "type": "git",
    "url": "git+https://github.com/poe-platform/poe-code.git"
  },
  "scripts": {
    "build": "rm -rf dist && tsc && cp src/composition.json dist/composition.json",
    "lint": "cd ../.. && eslint packages/toolcraft/src --ext ts && tsc -p packages/toolcraft/tsconfig.json --noEmit",
    "postpack": "node ../../scripts/manage-bundled-workspace-deps.mjs cleanup . toolcraft-schema toolcraft-design @poe-code/frontmatter @poe-code/agent-mcp-config @poe-code/agent-human-in-loop @poe-code/task-list @poe-code/agent-defs @poe-code/config-mutations @poe-code/user-error @poe-code/process-runner mcp-oauth-server tiny-http-mcp-server tiny-mcp-client tiny-stdio-mcp-server auth-store jose fast-string-width fast-wrap-ansi ignore jsonc-parser sisteransi smol-toml yaml",
    "prepack": "node ../../scripts/manage-bundled-workspace-deps.mjs prepare . toolcraft-schema toolcraft-design @poe-code/frontmatter @poe-code/agent-mcp-config @poe-code/agent-human-in-loop @poe-code/task-list @poe-code/agent-defs @poe-code/config-mutations @poe-code/user-error @poe-code/process-runner mcp-oauth-server tiny-http-mcp-server tiny-mcp-client tiny-stdio-mcp-server auth-store jose fast-string-width fast-wrap-ansi ignore jsonc-parser sisteransi smol-toml yaml",
    "test": "cd ../.. && vitest run packages/toolcraft/src",
    "test:unit": "cd ../.. && vitest run packages/toolcraft/src"
  },
  "signal_details": {
    "dependency_added_unknown": "3 new non-watchlisted dep(s): ['@poe-code/user-error', 'mcp-oauth-server', 'tiny-http-mcp-server']",
    "shared_repo_different_publisher": "repo 'git+https://github.com/poe-platform/poe-code.git' also claimed by 10 package(s) under different publishers: ['npm/tokenfill', 'npm/terminal-png', 'npm/tiny-stdio-mcp-server'] ..."
  },
  "time": {
    "created": "2026-04-23T16:09:59.016Z",
    "modified": "2026-07-20T15:15:46.142Z"
  }
}