npm @vibes.diy/vibe-srv-sandbox @10.6.1
score
0.75
high
flagged
2026-07-23 18:18
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/VibesDIY/vibes.diy.git' also claimed by 10 package(s) under different publishers: ['npm/@vibes.diy/cmd-tools', 'npm/@vibes.diy/cmd-harness', 'npm/call-ai'] ... |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['@vibes.diy/vibe-host-replica'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"fastandfearless",
"jchris"
],
"versions": 239
}
Evidence (package doc at flag time)
{
"dependencies_count": 7,
"dist": {
"integrity": "sha512-m2CJkFBvYoJr+7FiAL6Rc/Es36hADMYZHtiJxtSs2hOd8sRWJzkuIAi8l/K/hrBI+DUBdwBUK/3vsmPDvCKgIg==",
"tarball": "https://registry.npmjs.org/@vibes.diy/vibe-srv-sandbox/-/vibe-srv-sandbox-10.6.1.tgz",
"unpackedSize": 192570
},
"dist-tags": {
"dev": "2.5.11-dev.2",
"latest": "10.6.1"
},
"latest_version": "10.6.1",
"maintainers": [
{
"email": "meno.abels@gmail.com",
"name": "fastandfearless"
},
{
"email": "jchris@gmail.com",
"name": "jchris"
}
],
"num_versions": 241,
"repository": {
"type": "git",
"url": "git+https://github.com/VibesDIY/vibes.diy.git"
},
"scripts": {
"build": "core-cli tsc"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['@vibes.diy/vibe-host-replica']",
"shared_repo_different_publisher": "repo 'git+https://github.com/VibesDIY/vibes.diy.git' also claimed by 10 package(s) under different publishers: ['npm/@vibes.diy/cmd-tools', 'npm/@vibes.diy/cmd-harness', 'npm/call-ai'] ..."
},
"time": {
"created": "2026-03-27T07:12:31.071Z",
"modified": "2026-07-23T23:17:54.428Z"
}
}