npm @cannbot-ai/install-helper @1.1.5
score
0.5333
med
flagged
2026-07-22 02:26
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| dist_tag_anomaly | 0.5 | dist-tags.latest=1.1.5 but max published is 2.1.0 |
| mass_publish_burst | 0.8 | publisher 'yanhf' pushed 6 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"yanhf"
],
"versions": 105
}
Evidence (package doc at flag time)
{
"dependencies_count": 7,
"dist": {
"integrity": "sha512-zuK4n8fFGf9aFVeoTTAXtiTCrAyhZcFy7UNCaJHaRjGWkjOYwy3GCsScs3+sQnomByc2v5FPftc+SHVY/ACcSQ==",
"tarball": "https://registry.npmjs.org/@cannbot-ai/install-helper/-/install-helper-1.1.5.tgz",
"unpackedSize": 569179
},
"dist-tags": {
"beta": "1.1.6-beta.4",
"latest": "1.1.5"
},
"latest_version": "1.1.5",
"maintainers": [
{
"email": "1604047292@qq.com",
"name": "yanhf"
}
],
"num_versions": 106,
"repository": null,
"scripts": {
"build": "node scripts/gen-embedded.cjs && tsup",
"build:bin": "node scripts/gen-embedded.cjs && bash scripts/build-binaries.sh",
"build:npm": "node scripts/build-npm-packages.cjs",
"dev": "node scripts/gen-embedded.cjs && tsup --watch",
"pretest": "node scripts/gen-embedded.cjs",
"publish:npm": "node scripts/publish-npm.cjs",
"test": "vitest run",
"test:watch": "vitest"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=1.1.5 but max published is 2.1.0",
"mass_publish_burst": "publisher 'yanhf' pushed 6 packages in the last 15min on npm",
"no_repo": "package.json has no repository field"
},
"time": {
"created": "2026-06-18T10:15:06.611Z",
"modified": "2026-07-22T07:26:36.822Z"
}
}