BEACON

← candidates

npm @coodra/cli @0.2.0-beta.28

score
0.7153 high
flagged 2026-07-26 01:12
signals by category
identity 1 topology 1 enrichment 1

maintainers added: gvardhan, jaisurya-1801

package profile →

amplifiers co-occurring signal pairs that lift the final score

Signals fired

signalweightrationale
identity
maintainer_churn 1.0 added: ['gvardhan', 'jaisurya-1801']
topology
repository_url_changed 0.7 'git+https://github.com/Abishai95141/Coodra.git' -> 'git+https://github.com/matrix-maven/Coodra.git'
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 70d ago but package has 23 versions (expect >= 81d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "abishai_kc"
  ],
  "versions": 16
}

Evidence (package doc at flag time)

{
  "dependencies_count": 2,
  "dist": {
    "integrity": "sha512-vyKLfWEgcXqw9MClCgr2EIXZ9ntUjDKHQF/oqcrNGxIIy8YWxCQl+jOXT/+7eR7s55yiQNH0Vvg4cw3X3GEISg==",
    "tarball": "https://registry.npmjs.org/@coodra/cli/-/cli-0.2.0-beta.28.tgz",
    "unpackedSize": 100410049
  },
  "dist-tags": {
    "beta": "0.2.0-beta.27",
    "latest": "0.2.0-beta.28"
  },
  "latest_version": "0.2.0-beta.28",
  "maintainers": [
    {
      "email": "gyanendra.vn@matrixmaven.co",
      "name": "gvardhan"
    },
    {
      "email": "abishaioff@gmail.com",
      "name": "abishai_kc"
    },
    {
      "email": "jaisurya1882005@gmail.com",
      "name": "jaisurya-1801"
    }
  ],
  "num_versions": 23,
  "repository": {
    "directory": "packages/cli",
    "type": "git",
    "url": "git+https://github.com/matrix-maven/Coodra.git"
  },
  "scripts": {
    "//build": "Two-phase build (decision dec_83ba10c1, 2026-05-02). tsc emits .d.ts + the loose `dist/lib/outbox/*.js` files that workspace consumers (apps in dev) import via the `@coodra/cli/lib/outbox` exports entry. Then `scripts/bundle.mjs` runs esbuild to OVERWRITE `dist/index.js` with a self-contained bundle (workspace + npm deps inlined) and writes the bundled apps under `dist/runtime/{mcp-server,hooks-bridge}/` so `npm i -g @coodra/cli` ships everything needed. Externals: better-sqlite3 + sqlite-vec (native).",
    "//install:global": "Symlink the workspace build into the user's global npm prefix so `coodra` on $PATH points at the local dist/. --force overwrites any stale install (e.g. the pre-rename `@coodra/cli` package). Run after `pnpm --filter @coodra/cli build`.",
    "//prepublishOnly": "Builds the workspace in the proven dependency order (scripts/build-for-publish.mjs \u2014 web-v2 BEFORE cli's bundle, which a bare `turbo run build` can't guarantee because cli\u2194web-v2 would be a dependency cycle) THEN asserts the bundled web + service runtimes are present. So a clean clone publishes with just `pnpm install && cd packages/cli && npm publish` \u2014 dist/ is gitignored, so without the build the assert would refuse. Turbo-cached, so re-publishes are fast.",
    "//smoke:core": "Cross-platform end-to-end smoke for the Core (Claude Code) install path: init \u2192 start (mcp-server + hooks-bridge) \u2192 /healthz \u2192 status \u2192 stop. Requires `build` first. Drives the windows-latest CI job; runs identically on any OS for local validation.",
    "build": "tsc -p tsconfig.json && node scripts/bundle.mjs",
    "build:bundle-only": "node scripts/bundle.mjs",
    "build:tsc-only": "tsc -p tsconfig.json",
    "clean": "rm -rf dist .turbo .tsbuildinfo",
    "cli": "node dist/index.js",
    "dev": "tsx src/index.ts",
    "install:global": "npm i -g --force .",
    "lint": "biome check .",
    "prebuild": "node scripts/sync-version.mjs",
    "prepublishOnly": "node scripts/build-for-publish.mjs && node scripts/prepublish-assert.mjs",
    "smoke:core": "node scripts/core-smoke.mjs",
    "start": "node dist/index.js",
    "test:integration": "vitest run --config vitest.integration.config.ts",
    "test:unit": "vitest run",
    "test:watch": "vitest",
    "typecheck": "tsc -p tsconfig.typecheck.json"
  },
  "signal_details": {
    "_amplifiers": [
      "repository_url_changed + maintainer_churn: repo ownership claim shifted during identity churn (+0.10)"
    ],
    "maintainer_churn": "added: ['gvardhan', 'jaisurya-1801']",
    "repo_too_new_for_version_history": "claimed repo created 70d ago but package has 23 versions (expect >= 81d for that history)",
    "repository_url_changed": "'git+https://github.com/Abishai95141/Coodra.git' -> 'git+https://github.com/matrix-maven/Coodra.git'"
  },
  "time": {
    "created": "2026-05-15T10:36:29.075Z",
    "modified": "2026-07-26T06:12:07.712Z"
  }
}