npm oh-my-codes @4.0.5
score
0.6317
med
flagged
2026-07-27 08:04
Signals fired
| signal | weight | rationale |
|---|---|---|
| cadence | ||
| rapid_release | 0.8 | 7 versions in last 24h: ['4.0.1', '4.0.2', '4.0.3', '4.0.4', '4.0.5'] |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| typosquat | 1.0 | lev=1 to watched 'oh-my-codex' |
| mass_publish_burst | 0.8 | publisher 'sheltonsuen' pushed 5 packages in the last 15min on npm |
| enrichment | ||
| depsdev_no_source_repo | 0.5 | deps.dev has no SOURCE_REPO link for this version |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"sheltonsuen"
],
"versions": 57
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-k6Bnxoda9a8tyF+7EJgae4pKn0/aH8HnVqo+LuiM+jTLxOZePH50eIT22n6zQmU4kifUlmn5TtlxrTTdqjqjUw==",
"tarball": "https://registry.npmjs.org/oh-my-codes/-/oh-my-codes-4.0.5.tgz",
"unpackedSize": 2720
},
"dist-tags": {
"latest": "4.0.5"
},
"latest_version": "4.0.5",
"maintainers": [
{
"email": "sheltonsuen@gmail.com",
"name": "sheltonsuen"
}
],
"num_versions": 58,
"repository": null,
"scripts": {
"build": "./scripts/build-binary.sh",
"check": "cargo check --workspace",
"dev": "cargo run -p omc --",
"dev:daemon": "cargo run -p omcd --",
"fmt": "cargo fmt --all",
"fmt:check": "cargo fmt --all --check",
"lint": "cargo clippy --workspace --all-targets -- -D warnings",
"lint:fix": "cargo clippy --workspace --all-targets --fix -- -D warnings",
"test": "cargo test --workspace"
},
"signal_details": {
"depsdev_no_source_repo": "deps.dev has no SOURCE_REPO link for this version",
"mass_publish_burst": "publisher 'sheltonsuen' pushed 5 packages in the last 15min on npm",
"no_repo": "package.json has no repository field",
"rapid_release": "7 versions in last 24h: ['4.0.1', '4.0.2', '4.0.3', '4.0.4', '4.0.5']",
"typosquat": "lev=1 to watched 'oh-my-codex'"
},
"time": {
"created": "2026-04-24T08:29:18.063Z",
"modified": "2026-07-27T10:24:08.853Z"
}
}