npm @seanyao/roll @4.721.1
score
0.76
high
flagged
2026-07-20 12:49
amplifiers
co-occurring signal pairs that lift the final score
- size_spike + new_install_script: payload growth alongside install surface (+0.10)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| new_install_script | 1.0 | first time ['postinstall'] present |
| size_spike | 0.5 | unpackedSize 12872987 -> 44842504 (3.5×) |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=4.721.1 but max published is 2026.601.4 |
| dependency_added_unknown | 0.6 | 2 new non-watchlisted dep(s): ['chromium-bidi', 'playwright-core'] |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 109d ago but package has 164 versions (expect >= 132d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"seanyao"
],
"versions": 131
}
Evidence (package doc at flag time)
{
"dependencies_count": 2,
"dist": {
"integrity": "sha512-Od9AXRz81cNxcs5Q18X51LzcGYJp1Im3v7CiOHFBCpoupsRh6IcE25s3JyLhm9PiJPDz/doa6YX+BeNESFLFFA==",
"tarball": "https://registry.npmjs.org/@seanyao/roll/-/roll-4.721.1.tgz",
"unpackedSize": 44842504
},
"dist-tags": {
"latest": "4.721.1"
},
"latest_version": "4.721.1",
"maintainers": [
{
"email": "sean.dlut@gmail.com",
"name": "seanyao"
}
],
"num_versions": 164,
"repository": {
"type": "git",
"url": "git+https://github.com/seanyao/roll.git"
},
"scripts": {
"bundle": "node scripts/bundle.mjs",
"lint:role-taxonomy": "node scripts/audit-role-taxonomy.mjs",
"lint:story-ids": "node scripts/lint-story-ids.mjs",
"postinstall": "node scripts/postinstall-roll-capture.mjs",
"prepack": "pnpm -r build && pnpm bundle",
"test": "bash scripts/test-ts.sh",
"test:browser-live": "pnpm -r build && ROLL_BROWSER_LIVE=1 pnpm --filter @roll/cli exec vitest run --config vitest.live.config.ts",
"test:controlled-capture-live": "pnpm -r build && ROLL_BROWSER_LIVE=1 pnpm --filter @roll/infra exec vitest run --config vitest.live.config.ts",
"test:cov": "pnpm -r exec vitest run --coverage.enabled --coverage.provider=v8 --coverage.include='src/**' --coverage.reporter=text-summary --coverage.reporter=text",
"test:e2e": "pnpm -r build && pnpm --filter @roll/cli exec vitest run test/critical-flows.e2e.test.ts"
},
"signal_details": {
"_amplifiers": [
"size_spike + new_install_script: payload growth alongside install surface (+0.10)"
],
"dependency_added_unknown": "2 new non-watchlisted dep(s): ['chromium-bidi', 'playwright-core']",
"dist_tag_anomaly": "dist-tags.latest=4.721.1 but max published is 2026.601.4",
"new_install_script": "first time ['postinstall'] present",
"repo_too_new_for_version_history": "claimed repo created 109d ago but package has 164 versions (expect >= 132d for that history)",
"size_spike": "unpackedSize 12872987 -> 44842504 (3.5\u00d7)"
},
"time": {
"created": "2026-04-19T15:14:54.368Z",
"modified": "2026-07-20T17:49:17.636Z"
}
}