npm @xyo-network/chain-sdk @4.5.0
score
0.725
high
flagged
2026-07-21 10:19
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| size_spike | 0.5 | unpackedSize 19273 -> 1161985 (60.3×) |
| topology | ||
| mass_publish_burst | 0.8 | publisher 'atrouw' pushed 18 packages in the last 15min on npm |
| dependency_added_unknown | 0.6 | 18 new non-watchlisted dep(s): ['@ariestools/sdk', '@opentelemetry/context-async-hooks', '@opentelemetry/context-zone', '@opentelemetry/core', '@opentelemetry/exporter-prometheus'] ... |
| enrichment | ||
| repo_doesnt_exist | 1.0 | claimed repo xylabs/xyo-chain returns 404 on github.com |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"atrouw",
"joelbcarter",
"rphansen91",
"jordantrouw",
"jonesmac"
],
"versions": 305
}
Evidence (package doc at flag time)
{
"dependencies_count": 18,
"dist": {
"integrity": "sha512-MJ4fKT+eQAxQu9MArUdSaWL+muuIg8ZUOxm2sDDvRmExGdcIuIBQcPhI0hOTJgyfIQRraSV/E1JVP6u0+18sYA==",
"tarball": "https://registry.npmjs.org/@xyo-network/chain-sdk/-/chain-sdk-4.5.0.tgz",
"unpackedSize": 1161985
},
"dist-tags": {
"latest": "4.5.0"
},
"latest_version": "4.5.0",
"maintainers": [
{
"email": "arie.trouw@xylabs.com",
"name": "atrouw"
},
{
"email": "joelbcarter@gmail.com",
"name": "joelbcarter"
},
{
"email": "rphansen91@gmail.com",
"name": "rphansen91"
},
{
"email": "jordan.trouw@xy.company",
"name": "jordantrouw"
},
{
"email": "matt.jones@xylabs.com",
"name": "jonesmac"
}
],
"num_versions": 321,
"repository": {
"type": "git",
"url": "git+https://github.com/xylabs/xyo-chain.git"
},
"scripts": {
"build": "xy build -j 8",
"build-tests": "tsc --noEmit --lib dom,esnext",
"deploy": "echo Deploy not allowed!",
"deploy3": "echo Deploy3 not allowed!"
},
"signal_details": {
"dependency_added_unknown": "18 new non-watchlisted dep(s): ['@ariestools/sdk', '@opentelemetry/context-async-hooks', '@opentelemetry/context-zone', '@opentelemetry/core', '@opentelemetry/exporter-prometheus'] ...",
"mass_publish_burst": "publisher 'atrouw' pushed 18 packages in the last 15min on npm",
"repo_doesnt_exist": "claimed repo xylabs/xyo-chain returns 404 on github.com",
"size_spike": "unpackedSize 19273 -> 1161985 (60.3\u00d7)"
},
"time": {
"created": "2025-03-14T20:37:50.622Z",
"modified": "2026-07-21T15:18:58.198Z"
}
}