BEACON

← candidates

npm @lynox-ai/core @2.9.0

score
0.7318 high
flagged 2026-07-20 17:39
signals by category
content 1 topology 1

maintainers added: —

package profile →

Signals fired

signalweightrationale
content
install_script_payload 1.0 install/lifecycle script matches payload regex
topology
dependency_added_unknown 0.6 2 new non-watchlisted dep(s): ['mammoth', 'unpdf']

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "brandfusion"
  ],
  "versions": 51
}

Evidence (package doc at flag time)

{
  "dependencies_count": 14,
  "dist": {
    "integrity": "sha512-Nr4qJuJp/OAc2Ypf2Miroi+yKJkLi+sRDmYJbJX5H5EvpbUqTOHhezu/32rObbi5FPU83BbBiNedTR0LqNDvvg==",
    "tarball": "https://registry.npmjs.org/@lynox-ai/core/-/core-2.9.0.tgz",
    "unpackedSize": 5314919
  },
  "dist-tags": {
    "latest": "2.9.0"
  },
  "latest_version": "2.9.0",
  "maintainers": [
    {
      "email": "rafael@brandfusion.ch",
      "name": "brandfusion"
    }
  ],
  "num_versions": 71,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/lynox-ai/lynox.git"
  },
  "scripts": {
    "bench": "vitest bench --config vitest.bench.config.ts",
    "bench:online": "vitest bench --config vitest.bench.config.ts tests/performance/online/",
    "build": "tsc",
    "coverage": "vitest run --coverage",
    "dev": "node --env-file-if-exists=.env --watch --import tsx src/index.ts",
    "lint": "eslint src/",
    "postinstall": "node -e \"const f='scripts/postinstall.cjs';require('node:fs').existsSync(f)&&require('node:child_process').spawnSync(process.execPath,[f],{stdio:'inherit'})\"",
    "prepack": "find dist -name '*.js.map' -o -name '*.d.ts.map' | xargs rm -f",
    "prepare": "lefthook install || true",
    "prepublishOnly": "npm run build",
    "security": "sh scripts/security-scan.sh && vitest run tests/security/",
    "shapes:contract": "node packages/web-ui/scripts/check-shape-contract.mjs",
    "smoke:local": "bash scripts/smoke-local.sh",
    "start": "node dist/index.js",
    "test": "vitest run",
    "test:watch": "vitest",
    "tokens:contract": "node packages/web-ui/scripts/check-token-contract.mjs",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "dependency_added_unknown": "2 new non-watchlisted dep(s): ['mammoth', 'unpdf']",
    "install_script_payload": "install/lifecycle script matches payload regex"
  },
  "time": {
    "created": "2026-04-09T16:28:41.020Z",
    "modified": "2026-07-20T22:39:01.303Z"
  }
}