npm @itsliaaa/starcore @0.0.0-alpha.0

score

0.6507 med

flagged 2026-07-21 20:10

signals by category

content 3 cadence 2 topology 1 enrichment 1

maintainers added: —

Signals fired

signal	weight	rationale
content
new_install_script	1.0	first time ['preinstall'] present
license_changed	0.4	'Apache-2.0' -> 'AGPL-3.0-or-later'
provenance_dropped	0.8	prior version published with SLSA attestation; current version has none
cadence
superseded_quickly	0.9	prior version 0.0.0-alpha.16 lived 9min upstream before being pulled
removed_within_window	0.9	version 0.0.0-alpha.16 was removed upstream ~0min ago
topology
dependency_added_unknown	0.6	5 new non-watchlisted dep(s): ['cheerio', 'fflate', 'ffmpeg-static', 'file-type', 'qrcode']
enrichment
repo_too_new_for_version_history	0.7	claimed repo created 32d ago but package has 32 versions (expect >= 90d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "itsliaaa"
  ],
  "versions": 33
}

Evidence (package doc at flag time)

{
  "dependencies_count": 5,
  "dist": {
    "integrity": "sha512-kSN9qZ15JoKDZiKyKmnGXD3TSTO2Mdmvra062HcYMgCVddnJOdW13NNHVbHXiJRWOe7jJY5xIWfewj97hZxpXg==",
    "tarball": "https://registry.npmjs.org/@itsliaaa/starcore/-/starcore-0.0.0-alpha.0.tgz",
    "unpackedSize": 774819
  },
  "dist-tags": {
    "latest": "0.0.0-alpha.0"
  },
  "latest_version": "0.0.0-alpha.0",
  "maintainers": [
    {
      "email": "fenrys.cs@gmail.com",
      "name": "itsliaaa"
    }
  ],
  "num_versions": 32,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/itsliaaa/starcore.git"
  },
  "scripts": {
    "preinstall": "node ./engine-requirements.js"
  },
  "signal_details": {
    "dependency_added_unknown": "5 new non-watchlisted dep(s): ['cheerio', 'fflate', 'ffmpeg-static', 'file-type', 'qrcode']",
    "license_changed": "'Apache-2.0' -> 'AGPL-3.0-or-later'",
    "new_install_script": "first time ['preinstall'] present",
    "provenance_dropped": "prior version published with SLSA attestation; current version has none",
    "removed_within_window": "version 0.0.0-alpha.16 was removed upstream ~0min ago",
    "repo_too_new_for_version_history": "claimed repo created 32d ago but package has 32 versions (expect >= 90d for that history)",
    "superseded_quickly": "prior version 0.0.0-alpha.16 lived 9min upstream before being pulled"
  },
  "time": {
    "created": "2026-06-22T18:15:45.161Z",
    "modified": "2026-07-22T01:10:17.598Z"
  }
}