npm endform-darwin-arm64 @0.73.0
score
0.5
med
flagged
2026-07-21 04:32
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| typosquat | 1.0 | combosquat of 'endform' |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"ostenbom"
],
"versions": 216
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-a1jHWwRmErn4G96OBt7DjweZQs+A1ITgeHvamYXItfkBGTNbW/VFKwpcZi/0IYbdXvLKu4s0ctEck96DleKDTQ==",
"tarball": "https://registry.npmjs.org/endform-darwin-arm64/-/endform-darwin-arm64-0.73.0.tgz",
"unpackedSize": 15630899
},
"dist-tags": {
"beta": "0.49.0-beta.1",
"latest": "0.73.0",
"next": "0.46.1-beta.1"
},
"latest_version": "0.73.0",
"maintainers": [
{
"email": "oliver@endform.dev",
"name": "ostenbom"
}
],
"num_versions": 221,
"repository": null,
"scripts": null,
"signal_details": {
"no_repo": "package.json has no repository field",
"typosquat": "combosquat of 'endform'"
},
"time": {
"created": "2025-02-05T16:26:01.045Z",
"modified": "2026-07-21T09:32:47.141Z"
}
}