npm @vybestack/llxprt-code @0.10.0
score
0.75
high
flagged
2026-07-26 21:41
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| new_install_script | 1.0 | first time ['postinstall'] present |
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.10.0 but max published is 0.11.0-nightly.260727.c4abf5792 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/vybestack/llxprt-code.git' also claimed by 10 package(s) under different publishers: ['npm/@vybestack/llxprt-code-telemetry', 'npm/@vybestack/llxprt-code-providers', 'npm/@vybestack/llxprt-code-lsp'] ... |
| dependency_added_unknown | 0.6 | 10 new non-watchlisted dep(s): ['@vybestack/llxprt-code-agents', '@vybestack/llxprt-code-auth', '@vybestack/llxprt-code-ide-integration', '@vybestack/llxprt-code-mcp', '@vybestack/llxprt-code-providers'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"acoliver"
],
"versions": 433
}
Evidence (package doc at flag time)
{
"dependencies_count": 52,
"dist": {
"integrity": "sha512-4bOQ0DzzlkCZed5luKCm9seJHXF2dQAQMFv87sMJhaFJt7BdIJUkUrlRaKcxE2KTJ3DTab7piaQ1hwmGl2K6sA==",
"tarball": "https://registry.npmjs.org/@vybestack/llxprt-code/-/llxprt-code-0.10.0.tgz",
"unpackedSize": 4252487
},
"dist-tags": {
"alpha": "0.1.19-alpha",
"beta": "0.1.19-beta",
"gamma": "0.1.19-gamma",
"hotfix1": "0.1.16-hotfix1",
"latest": "0.10.0",
"nightly": "0.11.0-nightly.260727.c4abf5792"
},
"latest_version": "0.10.0",
"maintainers": [
{
"email": "acoliver@vybestack.dev",
"name": "acoliver"
}
],
"num_versions": 435,
"repository": {
"type": "git",
"url": "git+https://github.com/vybestack/llxprt-code.git"
},
"scripts": {
"build": "bun ../../scripts/build_package.ts && bun ../../scripts/chmod_executable.ts dist/index.js",
"debug": "bun --inspect-brk index.ts",
"format": "prettier --write .",
"lint": "eslint . --ext .ts,.tsx",
"postinstall": "node scripts/install-native-launchers.cjs",
"start": "bun index.ts",
"test": "vitest run",
"test:bun": "bun ../../scripts/run_bun_tests.ts --workspace cli",
"test:ci": "vitest run",
"test:ci:covered": "vitest run -c vitest.ci.covered.config.ts",
"test:ci:fast": "vitest run -c vitest.ci.fast.config.ts",
"test:integration": "vitest run -c vitest.integration.config.ts",
"test:legacy": "OPENAI_RESPONSES_DISABLE=true vitest run -t \"legacy|gpt-3.5-turbo\"",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"dependency_added_unknown": "10 new non-watchlisted dep(s): ['@vybestack/llxprt-code-agents', '@vybestack/llxprt-code-auth', '@vybestack/llxprt-code-ide-integration', '@vybestack/llxprt-code-mcp', '@vybestack/llxprt-code-providers'] ...",
"dist_tag_anomaly": "dist-tags.latest=0.10.0 but max published is 0.11.0-nightly.260727.c4abf5792",
"new_install_script": "first time ['postinstall'] present",
"shared_repo_different_publisher": "repo 'git+https://github.com/vybestack/llxprt-code.git' also claimed by 10 package(s) under different publishers: ['npm/@vybestack/llxprt-code-telemetry', 'npm/@vybestack/llxprt-code-providers', 'npm/@vybestack/llxprt-code-lsp'] ..."
},
"time": {
"created": "2025-07-19T01:07:41.515Z",
"modified": "2026-07-27T02:41:02.565Z"
}
}