npm @sentropic/h2a @0.85.19

score

0.8 high

flagged 2026-07-20 19:14

signals by category

content 2 topology 2 enrichment 1

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

size_spike + bin_added: payload growth alongside install surface (+0.10)

Signals fired

signal	weight	rationale
content
bin_added	0.8	new bin entry: ['h2a']
size_spike	0.5	unpackedSize 530280 -> 4893813 (9.2×)
topology
shared_repo_different_publisher	0.9	repo 'git+https://github.com/rhanka/h2a.git' also claimed by 1 package(s) under different publishers: ['npm/@sentropic/h2a-cli']
dependency_added_unknown	0.6	5 new non-watchlisted dep(s): ['@hono/mcp', '@hono/node-server', '@modelcontextprotocol/sdk', '@sentropic/track', 'hono']
enrichment
repo_too_new_for_version_history	0.7	claimed repo created 63d ago but package has 132 versions (expect >= 127d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "rhk"
  ],
  "versions": 104
}

Evidence (package doc at flag time)

{
  "dependencies_count": 5,
  "dist": {
    "integrity": "sha512-uN3lI/uYPhX/pZ6xdXTHtoaPl0FTILwIz3KKPr6dDHLy9kEYxddk5nMi6tF+IJNibasGyPqfthyU2LPA8pGcwA==",
    "tarball": "https://registry.npmjs.org/@sentropic/h2a/-/h2a-0.85.19.tgz",
    "unpackedSize": 4893813
  },
  "dist-tags": {
    "latest": "0.85.19"
  },
  "latest_version": "0.85.19",
  "maintainers": [
    {
      "email": "fabien.antoine@gmail.com",
      "name": "rhk"
    }
  ],
  "num_versions": 132,
  "repository": {
    "directory": "packages/h2a",
    "type": "git",
    "url": "git+https://github.com/rhanka/h2a.git"
  },
  "scripts": {
    "prepack": "node ../../scripts/check-focus-app.mjs && chmod +x dist/bin.js"
  },
  "signal_details": {
    "_amplifiers": [
      "size_spike + bin_added: payload growth alongside install surface (+0.10)"
    ],
    "bin_added": "new bin entry: ['h2a']",
    "dependency_added_unknown": "5 new non-watchlisted dep(s): ['@hono/mcp', '@hono/node-server', '@modelcontextprotocol/sdk', '@sentropic/track', 'hono']",
    "repo_too_new_for_version_history": "claimed repo created 63d ago but package has 132 versions (expect >= 127d for that history)",
    "shared_repo_different_publisher": "repo 'git+https://github.com/rhanka/h2a.git' also claimed by 1 package(s) under different publishers: ['npm/@sentropic/h2a-cli']",
    "size_spike": "unpackedSize 530280 -> 4893813 (9.2\u00d7)"
  },
  "time": {
    "created": "2026-05-18T20:07:42.226Z",
    "modified": "2026-07-19T15:09:17.334Z"
  }
}