npm oh-my-codes @4.0.4
score
0.6735
med
flagged
2026-07-27 05:24
Signals fired
| signal | weight | rationale |
|---|---|---|
| cadence | ||
| rapid_release | 0.8 | 6 versions in last 24h: ['4.0.0', '4.0.1', '4.0.2', '4.0.3', '4.0.4'] |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| typosquat | 1.0 | lev=1 to watched 'oh-my-codex' |
| mass_publish_burst | 0.8 | publisher 'sheltonsuen' pushed 5 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"sheltonsuen"
],
"versions": 57
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-6cWLZj379E0qgm0D3ky7y9pIrK83Bqv3JzRPRWqnJQHEyGSpNwodPdXCi/eZcHXkxJKV1DalnWGGqj8en/hgTA==",
"tarball": "https://registry.npmjs.org/oh-my-codes/-/oh-my-codes-4.0.4.tgz",
"unpackedSize": 2720
},
"dist-tags": {
"latest": "4.0.4"
},
"latest_version": "4.0.4",
"maintainers": [
{
"email": "sheltonsuen@gmail.com",
"name": "sheltonsuen"
}
],
"num_versions": 57,
"repository": null,
"scripts": {
"build": "./scripts/build-binary.sh",
"check": "cargo check --workspace",
"dev": "cargo run -p omc --",
"dev:daemon": "cargo run -p omcd --",
"fmt": "cargo fmt --all",
"fmt:check": "cargo fmt --all --check",
"lint": "cargo clippy --workspace --all-targets -- -D warnings",
"lint:fix": "cargo clippy --workspace --all-targets --fix -- -D warnings",
"test": "cargo test --workspace"
},
"signal_details": {
"mass_publish_burst": "publisher 'sheltonsuen' pushed 5 packages in the last 15min on npm",
"no_repo": "package.json has no repository field",
"rapid_release": "6 versions in last 24h: ['4.0.0', '4.0.1', '4.0.2', '4.0.3', '4.0.4']",
"typosquat": "lev=1 to watched 'oh-my-codex'"
},
"time": {
"created": "2026-04-24T08:29:18.063Z",
"modified": "2026-07-27T10:16:20.486Z"
}
}