npm apple-photos-mcp @2.1.2
score
0.8873
high
flagged
2026-07-20 12:54
amplifiers
co-occurring signal pairs that lift the final score
- install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)
- size_spike + install_script_payload: payload growth alongside install surface (+0.10)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| new_install_script | 1.0 | first time ['preinstall'] present |
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| size_spike | 0.5 | unpackedSize 122896 -> 1048873 (8.5×) |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 80d ago but package has 37 versions (expect >= 94d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"sweetrb"
],
"versions": 20
}
Evidence (package doc at flag time)
{
"dependencies_count": 2,
"dist": {
"integrity": "sha512-7l6NChulWeCNAdwYN+fgLyzh1yEFDmNEYt+7WOU+hmv/wHFNpMXPQ1dbaYnVtpEKGj96yp5usNhsw3opJ/S35w==",
"tarball": "https://registry.npmjs.org/apple-photos-mcp/-/apple-photos-mcp-2.1.2.tgz",
"unpackedSize": 1048873
},
"dist-tags": {
"latest": "2.1.2"
},
"latest_version": "2.1.2",
"maintainers": [
{
"email": "rob@superiortech.io",
"name": "sweetrb"
}
],
"num_versions": 37,
"repository": {
"type": "git",
"url": "git+https://github.com/sweetrb/apple-photos-mcp.git"
},
"scripts": {
"build": "tsc --noEmit && esbuild src/index.ts --bundle --platform=node --format=esm --target=node20 --outfile=build/index.js --banner:js=\"import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);\"",
"dev": "tsc --watch",
"format": "prettier --write src",
"format:check": "prettier --check src",
"lint": "eslint src",
"lint:fix": "eslint src --fix",
"preinstall": "node -e \"const fs=require('fs');const ua=process.env.npm_config_user_agent||'';if(fs.existsSync('.git')&&!ua.startsWith('pnpm')){console.error('\\nThis repo uses pnpm. npm/yarn resolve dependencies off-lockfile and the committed bundle will mismatch CI.\\n\\n corepack enable && pnpm install --frozen-lockfile\\n');process.exit(1)}\"",
"setup": "bash scripts/setup.sh",
"start": "node build/index.js",
"sync:skills": "node scripts/sync-skills.mjs",
"test": "vitest run",
"test:all": "vitest run && vitest run --config vitest.integration.config.ts",
"test:coverage": "vitest run --coverage",
"test:integration": "vitest run --config vitest.integration.config.ts",
"test:watch": "vitest",
"typecheck": "tsc --noEmit",
"version": "node scripts/sync-plugin-version.mjs && git add .claude-plugin .agents/plugins codex .hermes-plugin .antigravity-plugin"
},
"signal_details": {
"_amplifiers": [
"install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)",
"size_spike + install_script_payload: payload growth alongside install surface (+0.10)"
],
"install_script_payload": "install/lifecycle script matches payload regex",
"new_install_script": "first time ['preinstall'] present",
"repo_too_new_for_version_history": "claimed repo created 80d ago but package has 37 versions (expect >= 94d for that history)",
"size_spike": "unpackedSize 122896 -> 1048873 (8.5\u00d7)"
},
"time": {
"created": "2026-04-30T18:20:26.818Z",
"modified": "2026-07-20T17:54:04.340Z"
}
}