npm velia @0.3.5

score

0.6925 med

flagged 2026-06-05 05:57

signals by category

content 1 topology 2 enrichment 1

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

typosquat + bin_added: typosquat shape with active payload or stub-rush surface (+0.15)

Signals fired

signal	weight	rationale
content
bin_added	0.8	new bin entry: ['velia']
topology
typosquat	1.0	lev=1 to watched 'helia'
dependency_added_unknown	0.6	1 new non-watchlisted dep(s): ['typed-openapi']
enrichment
repo_too_new_for_version_history	0.7	claimed repo created 4d ago but package has 12 versions (expect >= 64d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "chiziaruhoma"
  ],
  "versions": 9
}

Evidence (package doc at flag time)

{
  "dependencies_count": 1,
  "dist": {
    "integrity": "sha512-yo/wi4PrBCOsA9PlasGGOwoLshMzNPRS1lcb6MM6b4mOIeS9yUxh5Hbnst+uqCLSJHOLW/UH7URcdv/VKrflQA==",
    "tarball": "https://registry.npmjs.org/velia/-/velia-0.3.5.tgz",
    "unpackedSize": 793545
  },
  "dist-tags": {
    "latest": "0.3.5"
  },
  "latest_version": "0.3.5",
  "maintainers": [
    {
      "email": "chiziaruhoma@gmail.com",
      "name": "chiziaruhoma"
    }
  ],
  "num_versions": 12,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/Zfinix/velia.git"
  },
  "scripts": {
    "build": "tsc -p tsconfig.build.json",
    "generate": "node scripts/generate.mjs",
    "prepare": "git config core.hooksPath .githooks 2>/dev/null || true",
    "prepublishOnly": "bun run test && bun run build",
    "test": "bun test tests/errors.test.ts tests/validation.test.ts",
    "test:sample": "bun run generate specs/sample.json && bun test tests/errors.test.ts tests/validation.test.ts tests/client.test.ts tests/ky.test.ts",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "_amplifiers": [
      "typosquat + bin_added: typosquat shape with active payload or stub-rush surface (+0.15)"
    ],
    "bin_added": "new bin entry: ['velia']",
    "dependency_added_unknown": "1 new non-watchlisted dep(s): ['typed-openapi']",
    "repo_too_new_for_version_history": "claimed repo created 4d ago but package has 12 versions (expect >= 64d for that history)",
    "typosquat": "lev=1 to watched 'helia'"
  },
  "time": {
    "created": "2026-06-01T07:25:55.738Z",
    "modified": "2026-06-03T09:28:45.200Z"
  }
}