npm frog @1.0.0
score
0.82
high
flagged
2026-07-27 01:37
signals by category
content
1
cadence
1
topology
2
enrichment
1
maintainers added: —
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| provenance_dropped | 0.8 | prior version published with SLSA attestation; current version has none |
| cadence | ||
| dormant_burst | 1.0 | dormant 589d (prev 0.18.3), then 1.0.0 just published |
| topology | ||
| repository_url_changed | 0.7 | 'git+https://github.com/wevm/frog.git' -> 'https://github.com/wevm/frog' |
| dependency_added_unknown | 0.6 | 3 new non-watchlisted dep(s): ['@clack/prompts', '@octokit/rest', 'yaml'] |
| enrichment | ||
| repo_doesnt_exist | 1.0 | claimed repo wevm/frog returns 404 on github.com |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"awkweb",
"jmoxey"
],
"versions": 521
}
Evidence (package doc at flag time)
{
"dependencies_count": 4,
"dist": {
"integrity": "sha512-mZ000oN3CHQa0Veyfnp38j03V8hexA4tkVj+doL9VMEAC93MIz4xS60UFR0tAUyRbGXYd0bwEQv9/omGVEduZg==",
"tarball": "https://registry.npmjs.org/frog/-/frog-1.0.0.tgz",
"unpackedSize": 658804
},
"dist-tags": {
"latest": "1.0.0"
},
"latest_version": "1.0.0",
"maintainers": [
{
"email": "tom@meagher.co",
"name": "awkweb"
},
{
"email": "jakemoxey@gmail.com",
"name": "jmoxey"
}
],
"num_versions": 522,
"repository": {
"type": "git",
"url": "https://github.com/wevm/frog"
},
"scripts": null,
"signal_details": {
"dependency_added_unknown": "3 new non-watchlisted dep(s): ['@clack/prompts', '@octokit/rest', 'yaml']",
"dormant_burst": "dormant 589d (prev 0.18.3), then 1.0.0 just published",
"provenance_dropped": "prior version published with SLSA attestation; current version has none",
"repo_doesnt_exist": "claimed repo wevm/frog returns 404 on github.com",
"repository_url_changed": "'git+https://github.com/wevm/frog.git' -> 'https://github.com/wevm/frog'"
},
"time": {
"created": "2013-04-17T23:14:34.367Z",
"modified": "2026-07-27T01:45:14.053Z"
}
}