BEACON

← candidates

npm purmemo-mcp @15.7.25

score
0.95 high
flagged 2026-07-26 00:04
signals by category
content 1 topology 1

maintainers added: —

package profile →

Signals fired

signalweightrationale
content
install_script_payload 1.0 install/lifecycle script matches payload regex
topology
shared_repo_different_publisher 0.9 repo 'git+https://github.com/purmemo-ai/purmemo-mcp.git' also claimed by 1 package(s) under different publishers: ['npm/@mseep/purmemo-mcp']

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "pur.memo",
    "puomemo"
  ],
  "versions": 147
}

Evidence (package doc at flag time)

{
  "dependencies_count": 5,
  "dist": {
    "integrity": "sha512-mmXp9L40679ICVnhZ1qq319x/JLpwPmfo2R9IfKFQxk0Kc8htecXJ7qRiOue0ujalwP67pOHF5fQ4sL5GabsOA==",
    "tarball": "https://registry.npmjs.org/purmemo-mcp/-/purmemo-mcp-15.7.25.tgz",
    "unpackedSize": 1944422
  },
  "dist-tags": {
    "latest": "15.7.25",
    "stable": "15.7.24"
  },
  "latest_version": "15.7.25",
  "maintainers": [
    {
      "email": "dev@purmemo.ai",
      "name": "pur.memo"
    },
    {
      "email": "dev@puo-memo.com",
      "name": "puomemo"
    }
  ],
  "num_versions": 147,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/purmemo-ai/purmemo-mcp.git"
  },
  "scripts": {
    "build": "tsc && npm run build:assets",
    "build:assets": "cp -r src/remote/widgets dist/remote/ && cp src/remote/login.html src/remote/success.html src/remote/icon.png src/remote/favicon.ico dist/remote/",
    "build:mcpb": "node scripts/build-mcpb.js",
    "dev": "node dist/server.js",
    "hooks": "node dist/setup.js hooks",
    "logout": "node dist/setup.js logout",
    "postinstall": "node -e \"console.log('\\\\n\ud83e\udde0 p\u016brmemo MCP ready! Run: npx purmemo-mcp init\\\\n')\"",
    "prepublishOnly": "npm run build",
    "setup": "node dist/setup.js setup",
    "start": "node dist/server.js",
    "status": "node dist/setup.js status",
    "test": "node --experimental-test-module-mocks --test tests/*.test.js"
  },
  "signal_details": {
    "install_script_payload": "install/lifecycle script matches payload regex",
    "shared_repo_different_publisher": "repo 'git+https://github.com/purmemo-ai/purmemo-mcp.git' also claimed by 1 package(s) under different publishers: ['npm/@mseep/purmemo-mcp']"
  },
  "time": {
    "created": "2025-08-18T23:33:52.687Z",
    "modified": "2026-07-26T05:03:33.142Z"
  }
}