npm fivocell @4.1.8
score
0.6205
med
flagged
2026-06-05 06:32
signals by category
content
2
cadence
1
topology
1
enrichment
1
maintainers added: —
amplifiers
co-occurring signal pairs that lift the final score
- install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| new_install_script | 1.0 | first time ['postinstall'] present |
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| cadence | ||
| rapid_release | 0.8 | 9 versions in last 24h: ['4.1.4', '4.1.5', '4.1.6', '4.1.7', '4.1.8'] |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| enrichment | ||
| depsdev_no_source_repo | 0.5 | deps.dev has no SOURCE_REPO link for this version |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"thevinsoni"
],
"versions": 6
}
Evidence (package doc at flag time)
{
"dependencies_count": 12,
"dist": {
"integrity": "sha512-qyDnAuEmSPcO5O5Y3FDSlrWm7ZzYusIdeA+tE3hVRA0JVY+YPQHSZnc7LNGce0oyABomGOmV3T7QiObEI8+nGQ==",
"tarball": "https://registry.npmjs.org/fivocell/-/fivocell-4.1.8.tgz",
"unpackedSize": 4859891
},
"dist-tags": {
"latest": "4.1.8"
},
"latest_version": "4.1.8",
"maintainers": [
{
"email": "isoniv7592@gmail.com",
"name": "thevinsoni"
}
],
"num_versions": 19,
"repository": null,
"scripts": {
"build": "tsc",
"dev": "tsc --watch",
"format": "prettier --write \"src/**/*.ts\"",
"lint": "eslint src/ --ext .ts",
"postinstall": "node -e \"require('child_process').spawnSync(process.execPath, ['dist/cli.js', 'install'], {stdio: 'inherit'})\"",
"prepack": "tsc",
"prepublishOnly": "tsc",
"start": "node dist/cli.js",
"test": "jest --passWithNoTests --no-coverage",
"test:coverage": "jest --passWithNoTests --coverage",
"test:vitest": "vitest run",
"test:watch": "jest --passWithNoTests --no-coverage --watch"
},
"signal_details": {
"_amplifiers": [
"install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)"
],
"depsdev_no_source_repo": "deps.dev has no SOURCE_REPO link for this version",
"install_script_payload": "install/lifecycle script matches payload regex",
"new_install_script": "first time ['postinstall'] present",
"no_repo": "package.json has no repository field",
"rapid_release": "9 versions in last 24h: ['4.1.4', '4.1.5', '4.1.6', '4.1.7', '4.1.8']"
},
"time": {
"created": "2026-05-26T20:54:24.940Z",
"modified": "2026-06-05T11:29:26.454Z"
}
}