npm icoa-cli @2.19.425
score
0.7
high
flagged
2026-07-25 20:56
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| cadence | ||
| rapid_release | 0.8 | 14 versions in last 24h: ['2.19.421', '2.19.422', '2.19.423', '2.19.424', '2.19.425'] |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"icoa"
],
"versions": 537
}
Evidence (package doc at flag time)
{
"dependencies_count": 10,
"dist": {
"integrity": "sha512-/ufQOIjpMqudt0uyg2eRJZxIrV1k+h71r0Tc9X3iv1Mc4AjjwLCfV7gzuGbDG2myfiykF/IpbM2EGs6lhNgQDQ==",
"tarball": "https://registry.npmjs.org/icoa-cli/-/icoa-cli-2.19.425.tgz",
"unpackedSize": 1099915
},
"dist-tags": {
"latest": "2.19.425"
},
"latest_version": "2.19.425",
"maintainers": [
{
"email": "media@oztry.org",
"name": "icoa"
}
],
"num_versions": 538,
"repository": null,
"scripts": {
"build": "tsc",
"build:release": "bash scripts/build-release.sh",
"dev": "tsc --watch",
"postinstall": "node -e \"try{require('./dist/postinstall.js')}catch(e){}\"",
"prepare": "husky",
"prepublishOnly": "npm run build:release",
"smoke": "tsc && node --test test/smoke/*.test.js",
"smoke:full": "tsc && SMOKE_LIFECYCLE=1 node --test test/*.test.js test/smoke/*.test.js",
"smoke:offline": "tsc && SMOKE_NO_NETWORK=1 node --test test/smoke/*.test.js",
"start": "node dist/index.js",
"test": "tsc && node --test test/*.test.js",
"ux-audit": "node panda/ux-audit.js",
"ux-record": "bash panda/ux-record.sh"
},
"signal_details": {
"install_script_payload": "install/lifecycle script matches payload regex",
"no_repo": "package.json has no repository field",
"rapid_release": "14 versions in last 24h: ['2.19.421', '2.19.422', '2.19.423', '2.19.424', '2.19.425']"
},
"time": {
"created": "2026-04-05T14:13:13.411Z",
"modified": "2026-07-26T01:56:44.774Z"
}
}