npm @cotal-ai/pi @0.14.5
score
0.6023
med
flagged
2026-07-24 20:54
Signals fired
| signal | weight | rationale |
|---|---|---|
| cadence | ||
| rapid_release | 0.8 | 5 versions in last 24h: ['0.14.1', '0.14.2', '0.14.3', '0.14.4', '0.14.5'] |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/Cotal-AI/Cotal.git' also claimed by 10 package(s) under different publishers: ['npm/@cotal-ai/vercel-ai', 'npm/@cotal-ai/connector-codex', 'npm/@cotal-ai/openai-agents'] ... |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 52d ago but package has 15 versions (expect >= 70d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"cotal-ai"
],
"versions": 14
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-GK52bFLqvuUiJAEC/o5WvtZRSY2ft5S0P8VthIkQ8f5mOtq4AREP0SMn+GGSCTwvWHNRaXp0ME6GaZb+ybAPeA==",
"tarball": "https://registry.npmjs.org/@cotal-ai/pi/-/pi-0.14.5.tgz",
"unpackedSize": 4190145
},
"dist-tags": {
"latest": "0.14.5"
},
"latest_version": "0.14.5",
"maintainers": [
{
"email": "hello@swarl-ai.com",
"name": "cotal-ai"
}
],
"num_versions": 15,
"repository": {
"directory": "extensions/pi",
"type": "git",
"url": "https://github.com/Cotal-AI/Cotal.git"
},
"scripts": {
"build": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\" && tsc -p tsconfig.json --emitDeclarationOnly && pnpm run bundle",
"bundle": "esbuild src/index.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/index.js --external:@cotal-ai/core && esbuild src/standalone.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/standalone.js --external:@earendil-works/pi-coding-agent --external:@earendil-works/pi-tui --banner:js=\"import { createRequire as __cotalCreateRequire } from 'node:module'; const require = __cotalCreateRequire(import.meta.url);\"",
"test": "pnpm run build && tsx pi.smoke.ts && tsx pi-sdk.smoke.ts && node --input-type=module -e \"await import('./dist/standalone.js'); console.log('pi standalone smoke: import passed')\"",
"typecheck": "tsc -p tsconfig.json --noEmit"
},
"signal_details": {
"rapid_release": "5 versions in last 24h: ['0.14.1', '0.14.2', '0.14.3', '0.14.4', '0.14.5']",
"repo_too_new_for_version_history": "claimed repo created 52d ago but package has 15 versions (expect >= 70d for that history)",
"shared_repo_different_publisher": "repo 'https://github.com/Cotal-AI/Cotal.git' also claimed by 10 package(s) under different publishers: ['npm/@cotal-ai/vercel-ai', 'npm/@cotal-ai/connector-codex', 'npm/@cotal-ai/openai-agents'] ..."
},
"time": {
"created": "2026-07-12T05:45:26.179Z",
"modified": "2026-07-25T01:20:54.278Z"
}
}