npm @quereus/quoomb-cli @4.4.1
score
0.5017
med
flagged
2026-07-27 15:03
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| mass_publish_burst | 0.8 | publisher 'n8allan' pushed 14 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"kjeib",
"n8allan"
],
"versions": 50
}
Evidence (package doc at flag time)
{
"dependencies_count": 6,
"dist": {
"integrity": "sha512-v5UQf24UNcMXk4wrWQDuZcN/AZvbjn0X0L3EecaVwEKENT7gOI/FMM5VHtJCe5ncwuUHhNJsX7tIonQ6NZs0rw==",
"tarball": "https://registry.npmjs.org/@quereus/quoomb-cli/-/quoomb-cli-4.4.1.tgz",
"unpackedSize": 4822
},
"dist-tags": {
"latest": "4.4.1"
},
"latest_version": "4.4.1",
"maintainers": [
{
"email": "kyle@batemans.org",
"name": "kjeib"
},
{
"email": "nate@digithought.com",
"name": "n8allan"
}
],
"num_versions": 51,
"repository": null,
"scripts": {
"//test": "NOTE: test/dot-commands.spec.ts smoke-tests table listing, schema display, CSV import type-inference, and export \u2014 the non-trivial logic here. test/remote-resolver.spec.ts covers the https plugin-load wiring (resolver install, fetch announcement, recorded hash), with fetch stubbed so nothing touches the network. --passWithNoTests stays as a safety net (not because this package is meant to stay test-free) so an empty glob doesn't fail the build.",
"//typecheck": "NOTE: tsconfig.json only includes src/, and vitest transpiles specs without checking them, so without this pass a signature change in src/ would leave test/ silently stale. Same arrangement as plugin-loader's typecheck.",
"build": "tsc",
"clean": "rimraf dist",
"dev": "tsc && node dist/bin/quoomb.js",
"lint": "echo 'No lint configured'",
"prepublish": "npm run build",
"test": "vitest run --passWithNoTests",
"typecheck": "tsc -p tsconfig.test.json --noEmit"
},
"signal_details": {
"mass_publish_burst": "publisher 'n8allan' pushed 14 packages in the last 15min on npm",
"no_repo": "package.json has no repository field"
},
"time": {
"created": "2025-12-30T22:10:46.605Z",
"modified": "2026-07-27T20:02:53.801Z"
}
}