npm @riddledc/riddle-proof @0.8.85
score
0.75
high
flagged
2026-07-20 16:10
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/riddledc/integrations.git' also claimed by 3 package(s) under different publishers: ['npm/@riddledc/openclaw-riddle-proof', 'npm/@riddledc/riddle-proof-local', 'npm/@riddledc/riddle-proof-core'] |
| dependency_added_unknown | 0.6 | 2 new non-watchlisted dep(s): ['@riddledc/riddle-proof-core', '@riddledc/riddle-proof-riddle-client'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"joeddjd"
],
"versions": 370
}
Evidence (package doc at flag time)
{
"dependencies_count": 3,
"dist": {
"integrity": "sha512-Gm/Kaq9rNwa8MWiOMlzct7axXEL6FtNYnXalyWD5KZ6sFc9gN/BfqETfBluCRDf2FnahaG+OqKXJo2xLMQh7IQ==",
"tarball": "https://registry.npmjs.org/@riddledc/riddle-proof/-/riddle-proof-0.8.85.tgz",
"unpackedSize": 8293196
},
"dist-tags": {
"latest": "0.8.85"
},
"latest_version": "0.8.85",
"maintainers": [
{
"email": "davisdiehl@gmail.com",
"name": "joeddjd"
}
],
"num_versions": 382,
"repository": {
"directory": "packages/riddle-proof",
"type": "git",
"url": "git+https://github.com/riddledc/integrations.git"
},
"scripts": {
"build": "npm --workspace @riddledc/riddle-proof-app-contract run build --if-present && tsup src/index.ts src/types.ts src/result.ts src/state.ts src/checkpoint.ts src/run-card.ts src/public-state.ts src/runner.ts src/engine-harness.ts src/codex-exec-agent.ts src/local-agent.ts src/cli.ts src/cli/index.ts src/diagnostics.ts src/proof-session.ts src/playability.ts src/basic-gameplay.ts src/profile.ts src/profile/index.ts src/profile-suggestions.ts src/receipts.ts src/semantic-certificate.ts src/grounded-evidence.ts src/checked-meaning.ts src/change-proof.ts src/pr-comment.ts src/openclaw.ts src/proof-run-core.ts src/proof-run-engine.ts src/riddle-client.ts src/runtime/riddle-client.ts src/spec/index.ts src/spec/types.ts src/spec/result.ts src/spec/state.ts src/spec/checkpoint.ts src/spec/run-card.ts src/spec/public-state.ts src/runtime/index.ts src/app-contract/index.ts src/advanced/index.ts src/advanced/runner.ts src/advanced/engine-harness.ts src/advanced/proof-run-core.ts src/advanced/proof-run-engine.ts src/adapters/openclaw.ts src/adapters/local-agent.ts src/adapters/codex-exec-agent.ts src/adapters/codex.ts --format cjs,esm --dts --out-dir dist --clean",
"clean": "rm -rf dist",
"lint": "echo 'lint: (not configured)'",
"test": "npm run build && node test.js && node semantic-certificate.test.js && node grounded-evidence.test.js && node grounded-semantic-closure.test.js && node checked-meaning-compatibility.test.js && node hosted-client-compatibility.test.js && node proof-run.test.js && node formal-conformance.test.js && node trust-boundary.test.js && node regression-packs.test.js && node story-matrix.test.js && python3 runtime/tests/trust_boundary_regression.py && python3 runtime/tests/ship_artifact_publication.py && (python3 runtime/tests/recon_verify_smoke.py >/tmp/riddle-proof-recon-verify-smoke.json || (tail -120 /tmp/riddle-proof-recon-verify-smoke.json; exit 1))"
},
"signal_details": {
"dependency_added_unknown": "2 new non-watchlisted dep(s): ['@riddledc/riddle-proof-core', '@riddledc/riddle-proof-riddle-client']",
"shared_repo_different_publisher": "repo 'git+https://github.com/riddledc/integrations.git' also claimed by 3 package(s) under different publishers: ['npm/@riddledc/openclaw-riddle-proof', 'npm/@riddledc/riddle-proof-local', 'npm/@riddledc/riddle-proof-core']"
},
"time": {
"created": "2026-04-15T23:20:59.924Z",
"modified": "2026-07-19T20:11:30.339Z"
}
}