npm @depup/oclif @4.23.28-depup.4
score
0.7129
high
flagged
2026-07-23 11:35
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| mass_publish_burst | 0.8 | publisher 'chiefmikey' pushed 45 packages in the last 15min on npm |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/oclif/oclif.git' also claimed by 2 package(s) under different publishers: ['npm/oclif', 'npm/create-oclif'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"chiefmikey"
],
"versions": 28
}
Evidence (package doc at flag time)
{
"dependencies_count": 23,
"dist": {
"integrity": "sha512-CpOeLHoZH3AJnKER/n6slrrPhb3blg3wS4PLg42pkuS/wJZuTDwIGYq58YPH0HjKinBwtzFvHb7KzCldqnr1Gw==",
"tarball": "https://registry.npmjs.org/@depup/oclif/-/oclif-4.23.28-depup.4.tgz",
"unpackedSize": 283010
},
"dist-tags": {
"latest": "4.23.28-depup.4"
},
"latest_version": "4.23.28-depup.4",
"maintainers": [
{
"email": "wolfemikl@gmail.com",
"name": "chiefmikey"
}
],
"num_versions": 29,
"repository": {
"type": "git",
"url": "git+https://github.com/oclif/oclif.git"
},
"scripts": {
"build": "shx rm -rf lib && tsc",
"commitlint": "commitlint",
"compile": "tsc",
"format": "prettier --write \"+(src|test)/**/*.+(ts|js|json)\"",
"lint": "eslint",
"oclif": "bin/run.js",
"posttest": "yarn run lint",
"test": "nyc mocha --forbid-only \"test/unit/*.test.ts\"",
"test:integration": "mocha --forbid-only \"test/integration/*.test.ts\" --timeout 900000",
"test:integration:cli": "mocha test/integration/cli.test.ts --timeout 600000",
"test:integration:deb": "mocha test/integration/deb.test.ts --timeout 900000",
"test:integration:init": "mocha test/integration/init.test.ts --timeout 600000",
"test:integration:macos": "mocha test/integration/macos.test.ts --timeout 900000",
"test:integration:publish": "mocha test/integration/publish.test.ts --timeout 900000",
"test:integration:sf": "mocha test/integration/sf.test.ts --timeout 600000",
"test:integration:win": "mocha test/integration/win.test.ts --timeout 900000"
},
"signal_details": {
"mass_publish_burst": "publisher 'chiefmikey' pushed 45 packages in the last 15min on npm",
"shared_repo_different_publisher": "repo 'git+https://github.com/oclif/oclif.git' also claimed by 2 package(s) under different publishers: ['npm/oclif', 'npm/create-oclif']"
},
"time": {
"created": "2026-03-17T21:29:22.543Z",
"modified": "2026-07-23T16:35:07.066Z"
}
}