npm oh-my-codes @4.2.0
score
0.6843
med
flagged
2026-07-28 01:20
Signals fired
| signal | weight | rationale |
|---|---|---|
| cadence | ||
| rapid_release | 0.8 | 11 versions in last 24h: ['4.0.7', '4.0.8', '4.0.9', '4.1.0', '4.2.0'] |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| typosquat | 1.0 | lev=1 to watched 'oh-my-codex' |
| mass_publish_burst | 0.8 | publisher 'sheltonsuen' pushed 6 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"sheltonsuen"
],
"versions": 64
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-4sNSS0vRB8iSZ6TbFStt6hHvVy2Qq5h4g9gKWe4V8AFyjbTQjBRgrh0A2cXA0vsHJm+ndg0Pns3ThEXrUfAbJg==",
"tarball": "https://registry.npmjs.org/oh-my-codes/-/oh-my-codes-4.2.0.tgz",
"unpackedSize": 2811
},
"dist-tags": {
"latest": "4.2.0"
},
"latest_version": "4.2.0",
"maintainers": [
{
"email": "sheltonsuen@gmail.com",
"name": "sheltonsuen"
}
],
"num_versions": 64,
"repository": null,
"scripts": {
"build": "./scripts/build-binary.sh",
"check": "cargo check --workspace",
"dev": "cargo run -p omc --",
"dev:daemon": "cargo run -p omcd --",
"fmt": "cargo fmt --all",
"fmt:check": "cargo fmt --all --check",
"lint": "cargo clippy --workspace --all-targets -- -D warnings",
"lint:fix": "cargo clippy --workspace --all-targets --fix -- -D warnings",
"test": "cargo test --workspace"
},
"signal_details": {
"mass_publish_burst": "publisher 'sheltonsuen' pushed 6 packages in the last 15min on npm",
"no_repo": "package.json has no repository field",
"rapid_release": "11 versions in last 24h: ['4.0.7', '4.0.8', '4.0.9', '4.1.0', '4.2.0']",
"typosquat": "lev=1 to watched 'oh-my-codex'"
},
"time": {
"created": "2026-04-24T08:29:18.063Z",
"modified": "2026-07-28T05:08:34.221Z"
}
}