npm @crouton-kit/crouter @0.3.119
score
0.7287
high
flagged
2026-07-20 21:33
amplifiers
co-occurring signal pairs that lift the final score
- size_spike + new_install_script: payload growth alongside install surface (+0.10)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| new_install_script | 1.0 | first time ['postinstall'] present |
| script_count_spike | 0.5 | scripts count 6 -> 16 |
| size_spike | 0.5 | unpackedSize 3510273 -> 16191247 (4.6×) |
| topology | ||
| repository_url_changed | 0.7 | 'git+https://github.com/crouton-labs/crouter.git' -> 'git+https://github.com/vallum-security/crouter.git' |
| dependency_added_unknown | 0.6 | 19 new non-watchlisted dep(s): ['@earendil-works/pi-agent-core', '@fontsource-variable/fraunces', '@fontsource-variable/instrument-sans', '@fontsource-variable/martian-mono', '@fontsource/fragment-mono'] ... |
| enrichment | ||
| repo_doesnt_exist | 1.0 | claimed repo vallum-security/crouter returns 404 on github.com |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"captaincrouton89"
],
"versions": 38
}
Evidence (package doc at flag time)
{
"dependencies_count": 32,
"dist": {
"integrity": "sha512-AMDrtrpRiCd/kqC92OnSFfprtxY0CL9+oTTlCDNW72SDMEGsteYsuN1/U3+zph6QWPYeAR5IlKRjg8Miwjv/4Q==",
"tarball": "https://registry.npmjs.org/@crouton-kit/crouter/-/crouter-0.3.119.tgz",
"unpackedSize": 16191247
},
"dist-tags": {
"latest": "0.3.119"
},
"latest_version": "0.3.119",
"maintainers": [
{
"email": "rhyneer.silas@gmail.com",
"name": "captaincrouton89"
}
],
"num_versions": 118,
"repository": {
"type": "git",
"url": "git+https://github.com/vallum-security/crouter.git"
},
"scripts": {
"build": "node scripts/build.mjs",
"dev": "tsx src/cli.ts",
"install-runtime": "node scripts/install-runtime.mjs",
"link": "npm link",
"lint:web-px": "node scripts/lint-web-px.mjs",
"postinstall": "node scripts/postinstall.mjs",
"postpack": "node scripts/runtime-lock.mjs postpack",
"prepack": "node scripts/runtime-lock.mjs prepack",
"prepublishOnly": "npm run build",
"test": "node scripts/test-runner.mjs fast",
"test:build-output": "node scripts/test-runner.mjs build-output",
"test:full": "node scripts/test-runner.mjs full",
"test:full:cheap": "node scripts/test-runner.mjs cheap",
"test:full:heavy": "node scripts/test-runner.mjs heavy",
"test:full:live": "node scripts/test-runner.mjs live",
"test:full:process": "node scripts/test-runner.mjs process"
},
"signal_details": {
"_amplifiers": [
"size_spike + new_install_script: payload growth alongside install surface (+0.10)"
],
"dependency_added_unknown": "19 new non-watchlisted dep(s): ['@earendil-works/pi-agent-core', '@fontsource-variable/fraunces', '@fontsource-variable/instrument-sans', '@fontsource-variable/martian-mono', '@fontsource/fragment-mono'] ...",
"new_install_script": "first time ['postinstall'] present",
"repo_doesnt_exist": "claimed repo vallum-security/crouter returns 404 on github.com",
"repository_url_changed": "'git+https://github.com/crouton-labs/crouter.git' -> 'git+https://github.com/vallum-security/crouter.git'",
"script_count_spike": "scripts count 6 -> 16",
"size_spike": "unpackedSize 3510273 -> 16191247 (4.6\u00d7)"
},
"time": {
"created": "2026-05-12T07:09:55.261Z",
"modified": "2026-07-21T02:33:37.416Z"
}
}