npm @c8y/toolkit @1023.82.0
score
0.7
high
flagged
2026-05-20 15:51
amplifiers
co-occurring signal pairs that lift the final score
- bin_added + no_repo: executable added with no upstream source for review (+0.15)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| bin_added | 0.8 | new bin entry: ['c8y-toolkit'] |
| topology | ||
| no_repo | 0.3 | package.json has no repository field |
| dist_tag_anomaly | 0.5 | dist-tags.latest=1023.82.0 but max published is 1023.82.1 |
| dependency_added_unknown | 0.6 | 7 new non-watchlisted dep(s): ['@c8y/client', 'chalk', 'commander', 'lodash', 'semver'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"c8y"
],
"versions": 215
}
Evidence (package doc at flag time)
{
"dependencies_count": 7,
"dist": {
"integrity": "sha512-vXVjFLnsPEzHgyhylC2K6l2Ri8PPCpY2yIkVlSkRBdaabYIjtIl37PxFCU8hMrs6kPnlpZ0ODDXYnRv9JKyYxA==",
"tarball": "https://registry.npmjs.org/@c8y/toolkit/-/toolkit-1023.82.0.tgz",
"unpackedSize": 83542
},
"dist-tags": {
"1023.14-lts": "1023.14.162",
"latest": "1023.82.0",
"next": "1023.82.1",
"y2026-lts": "1023.14.161",
"y2027-lts": "1023.82.0"
},
"latest_version": "1023.82.0",
"maintainers": [
{
"email": "gen-app-enablement@cumulocity.com",
"name": "c8y"
}
],
"num_versions": 217,
"repository": null,
"scripts": {
"build": "rimraf dist && tsc",
"cli": "yarn build && node ./dist/cli.js"
},
"signal_details": {
"_amplifiers": [
"bin_added + no_repo: executable added with no upstream source for review (+0.15)"
],
"bin_added": "new bin entry: ['c8y-toolkit']",
"dependency_added_unknown": "7 new non-watchlisted dep(s): ['@c8y/client', 'chalk', 'commander', 'lodash', 'semver'] ...",
"dist_tag_anomaly": "dist-tags.latest=1023.82.0 but max published is 1023.82.1",
"no_repo": "package.json has no repository field"
},
"time": {
"created": "2025-03-27T01:14:14.764Z",
"modified": "2026-05-20T20:51:35.505Z"
}
}