npm @getpaseo/server @0.1.110
score
0.5236
med
flagged
2026-07-22 03:58
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| size_spike | 0.5 | unpackedSize 4124730 -> 24189228 (5.9×) |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.1.110 but max published is 0.2.0-beta.1 |
| mass_publish_burst | 0.8 | publisher 'boudra' pushed 6 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"boudra"
],
"versions": 97
}
Evidence (package doc at flag time)
{
"dependencies_count": 34,
"dist": {
"integrity": "sha512-kAHLfZyfvqUk5w1hj/QHTYcaWoQMyDlDtmZ/U/zOIuJq3ISmKp2Z/XYF4VBqJNpU/NNitsRWxibJaUly5cwcyw==",
"tarball": "https://registry.npmjs.org/@getpaseo/server/-/server-0.1.110.tgz",
"unpackedSize": 24189228
},
"dist-tags": {
"beta": "0.2.0-beta.2",
"latest": "0.1.110"
},
"latest_version": "0.1.110",
"maintainers": [
{
"email": "boudra.moha@gmail.com",
"name": "boudra"
}
],
"num_versions": 118,
"repository": null,
"scripts": {
"build": "npm run build:lib && npm run build:scripts",
"build:clean": "npm run clean && npm run build",
"build:lib": "tsc -p tsconfig.server.json --incremental false && node -e \"const fs=require('node:fs'); fs.mkdirSync('dist/server/server/speech/providers/local/sherpa/assets',{recursive:true}); fs.copyFileSync('src/server/speech/providers/local/sherpa/assets/silero_vad.onnx','dist/server/server/speech/providers/local/sherpa/assets/silero_vad.onnx'); fs.cpSync('src/terminal/shell-integration','dist/server/terminal/shell-integration',{recursive:true}); fs.cpSync('src/terminal/shell-integration','dist/src/terminal/shell-integration',{recursive:true}); fs.copyFileSync('src/terminal/terminal-ts-loader.mjs','dist/server/terminal/terminal-ts-loader.mjs');\"",
"build:scripts": "tsc -p tsconfig.scripts.json --incremental false && node -e \"const fs=require('node:fs'); fs.mkdirSync('dist/scripts',{recursive:true}); fs.copyFileSync('scripts/mcp-stdio-socket-bridge-cli.mjs','dist/scripts/mcp-stdio-socket-bridge-cli.mjs');\"",
"clean": "node ../../scripts/clean-package-dist.mjs",
"dev": "cross-env PASEO_NODE_ENV=development node --import tsx scripts/dev-runner.ts",
"dev:tsx": "cross-env PASEO_NODE_ENV=development tsx watch --ignore '**/*.timestamp-*' scripts/dev-runner.ts",
"generate:config-schema": "tsx scripts/generate-config-schema.ts",
"measure:agent-tools": "tsx scripts/measure-agent-tools-context.ts",
"prepack": "npm run build:clean && npm --prefix ../.. run build:daemon-web-ui",
"speech:download": "tsx scripts/download-speech-models.ts",
"speech:models": "tsx scripts/list-speech-models.ts",
"speech:transcribe:local": "tsx scripts/transcribe-local-wav.ts",
"start": "node dist/scripts/supervisor-entrypoint.js",
"test": "npm run test:unit && npm run test:integration",
"test:e2e": "vitest run e2e.test.ts --maxWorkers=1 --exclude \"**/*.real.e2e.test.ts\" --exclude \"**/*.local.e2e.test.ts\"",
"test:e2e:all": "vitest run e2e.test.ts --maxWorkers=1",
"test:e2e:local": "npm run test:integration:local",
"test:e2e:real": "npm run test:integration:real",
"test:e2e:relay:live": "cross-env RUN_LIVE_RELAY_E2E=1 vitest run src/server/daemon-e2e/live-relay.real.e2e.test.ts --maxWorkers=1",
"test:e2e:ui": "vitest --ui e2e.test.ts",
"test:integration": "vitest run --maxWorkers=1 src/server/daemon-e2e/models.e2e.test.ts src/server/daemon-e2e/live-preferences.e2e.test.ts src/server/agent/model-catalog.e2e.test.ts",
"test:integration:all": "npm run test:e2e",
"test:integration:local": "vitest run local.e2e.test.ts",
"test:integration:real": "vitest run real.e2e.test.ts",
"test:ui": "vitest --ui",
"test:unit": "vitest run --exclude \"**/*.e2e.test.ts\"",
"test:watch": "vitest",
"typecheck": "tsgo -p tsconfig.server.typecheck.json --noEmit"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.1.110 but max published is 0.2.0-beta.1",
"mass_publish_burst": "publisher 'boudra' pushed 6 packages in the last 15min on npm",
"no_repo": "package.json has no repository field",
"size_spike": "unpackedSize 4124730 -> 24189228 (5.9\u00d7)"
},
"time": {
"created": "2026-02-12T07:06:32.807Z",
"modified": "2026-07-22T08:58:28.132Z"
}
}