BEACON

← candidates

npm @quereus/quoomb-cli @4.4.1

score
0.5017 med
flagged 2026-07-27 15:03
signals by category
topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
topology
no_repo 0.3 package.json has no repository field
mass_publish_burst 0.8 publisher 'n8allan' pushed 14 packages in the last 15min on npm

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "kjeib",
    "n8allan"
  ],
  "versions": 50
}

Evidence (package doc at flag time)

{
  "dependencies_count": 6,
  "dist": {
    "integrity": "sha512-v5UQf24UNcMXk4wrWQDuZcN/AZvbjn0X0L3EecaVwEKENT7gOI/FMM5VHtJCe5ncwuUHhNJsX7tIonQ6NZs0rw==",
    "tarball": "https://registry.npmjs.org/@quereus/quoomb-cli/-/quoomb-cli-4.4.1.tgz",
    "unpackedSize": 4822
  },
  "dist-tags": {
    "latest": "4.4.1"
  },
  "latest_version": "4.4.1",
  "maintainers": [
    {
      "email": "kyle@batemans.org",
      "name": "kjeib"
    },
    {
      "email": "nate@digithought.com",
      "name": "n8allan"
    }
  ],
  "num_versions": 51,
  "repository": null,
  "scripts": {
    "//test": "NOTE: test/dot-commands.spec.ts smoke-tests table listing, schema display, CSV import type-inference, and export \u2014 the non-trivial logic here. test/remote-resolver.spec.ts covers the https plugin-load wiring (resolver install, fetch announcement, recorded hash), with fetch stubbed so nothing touches the network. --passWithNoTests stays as a safety net (not because this package is meant to stay test-free) so an empty glob doesn't fail the build.",
    "//typecheck": "NOTE: tsconfig.json only includes src/, and vitest transpiles specs without checking them, so without this pass a signature change in src/ would leave test/ silently stale. Same arrangement as plugin-loader's typecheck.",
    "build": "tsc",
    "clean": "rimraf dist",
    "dev": "tsc && node dist/bin/quoomb.js",
    "lint": "echo 'No lint configured'",
    "prepublish": "npm run build",
    "test": "vitest run --passWithNoTests",
    "typecheck": "tsc -p tsconfig.test.json --noEmit"
  },
  "signal_details": {
    "mass_publish_burst": "publisher 'n8allan' pushed 14 packages in the last 15min on npm",
    "no_repo": "package.json has no repository field"
  },
  "time": {
    "created": "2025-12-30T22:10:46.605Z",
    "modified": "2026-07-27T20:02:53.801Z"
  }
}