npm purmemo-mcp @15.7.25
score
0.95
high
flagged
2026-07-26 00:04
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/purmemo-ai/purmemo-mcp.git' also claimed by 1 package(s) under different publishers: ['npm/@mseep/purmemo-mcp'] |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"pur.memo",
"puomemo"
],
"versions": 147
}
Evidence (package doc at flag time)
{
"dependencies_count": 5,
"dist": {
"integrity": "sha512-mmXp9L40679ICVnhZ1qq319x/JLpwPmfo2R9IfKFQxk0Kc8htecXJ7qRiOue0ujalwP67pOHF5fQ4sL5GabsOA==",
"tarball": "https://registry.npmjs.org/purmemo-mcp/-/purmemo-mcp-15.7.25.tgz",
"unpackedSize": 1944422
},
"dist-tags": {
"latest": "15.7.25",
"stable": "15.7.24"
},
"latest_version": "15.7.25",
"maintainers": [
{
"email": "dev@purmemo.ai",
"name": "pur.memo"
},
{
"email": "dev@puo-memo.com",
"name": "puomemo"
}
],
"num_versions": 147,
"repository": {
"type": "git",
"url": "git+https://github.com/purmemo-ai/purmemo-mcp.git"
},
"scripts": {
"build": "tsc && npm run build:assets",
"build:assets": "cp -r src/remote/widgets dist/remote/ && cp src/remote/login.html src/remote/success.html src/remote/icon.png src/remote/favicon.ico dist/remote/",
"build:mcpb": "node scripts/build-mcpb.js",
"dev": "node dist/server.js",
"hooks": "node dist/setup.js hooks",
"logout": "node dist/setup.js logout",
"postinstall": "node -e \"console.log('\\\\n\ud83e\udde0 p\u016brmemo MCP ready! Run: npx purmemo-mcp init\\\\n')\"",
"prepublishOnly": "npm run build",
"setup": "node dist/setup.js setup",
"start": "node dist/server.js",
"status": "node dist/setup.js status",
"test": "node --experimental-test-module-mocks --test tests/*.test.js"
},
"signal_details": {
"install_script_payload": "install/lifecycle script matches payload regex",
"shared_repo_different_publisher": "repo 'git+https://github.com/purmemo-ai/purmemo-mcp.git' also claimed by 1 package(s) under different publishers: ['npm/@mseep/purmemo-mcp']"
},
"time": {
"created": "2025-08-18T23:33:52.687Z",
"modified": "2026-07-26T05:03:33.142Z"
}
}