npm @indigoai-us/hq-cli @5.77.13
score
0.825
high
flagged
2026-07-29 11:49
Signals fired
| signal | weight | rationale |
|---|---|---|
| cadence | ||
| rapid_release | 0.8 | 3 versions in last 24h: ['5.77.11', '5.77.12', '5.77.13'] |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/indigoai-us/hq.git' also claimed by 2 package(s) under different publishers: ['npm/@indigoai-us/hq-cloud', 'npm/create-hq'] |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['@aws-sdk/client-iot-data-plane'] |
| enrichment | ||
| repo_doesnt_exist | 1.0 | claimed repo indigoai-us/hq returns 404 on github.com |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"stefanjohnson",
"yousuf-indigo",
"hq-agent"
],
"versions": 172
}
Evidence (package doc at flag time)
{
"dependencies_count": 14,
"dist": {
"integrity": "sha512-tkapnGeA86eXyRMV+CZHhp7eke904fjrWj+L1PC9d/rVtj4DQ8t70tt8eGIoRUIwdZ7CBYh+0Up7UPoSljDPNg==",
"tarball": "https://registry.npmjs.org/@indigoai-us/hq-cli/-/hq-cli-5.77.13.tgz",
"unpackedSize": 4494972
},
"dist-tags": {
"latest": "5.77.13",
"rc": "5.17.0-sources-rc.2"
},
"latest_version": "5.77.13",
"maintainers": [
{
"email": "therealstefan@gmail.com",
"name": "stefanjohnson"
},
{
"email": "Yousuf@getindigo.ai",
"name": "yousuf-indigo"
},
{
"email": "stefan@hqforwork.com",
"name": "hq-agent"
}
],
"num_versions": 173,
"repository": {
"directory": "packages/hq-cli",
"type": "git",
"url": "git+https://github.com/indigoai-us/hq.git"
},
"scripts": {
"build": "node scripts/generate-dsn.mjs && tsc && node scripts/chmod-bins.mjs",
"clean": "rm -rf dist",
"coverage": "vitest run --coverage --coverage.reporter=text-summary --coverage.reporter=json-summary",
"gen:scan-golden": "node scripts/generate-scan-packages-table.mjs > src/utils/__fixtures__/scan-packages.generated-block.sh",
"lint": "eslint .",
"prepublishOnly": "npm run build",
"test": "vitest run",
"test:db": "vitest run src/lib/db test/commands/db.test.ts test/commands/db-tenant-isolation.test.ts",
"test:e2e": "vitest run --config vitest.e2e.config.ts",
"typecheck": "tsc --noEmit",
"vitest": "vitest"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['@aws-sdk/client-iot-data-plane']",
"rapid_release": "3 versions in last 24h: ['5.77.11', '5.77.12', '5.77.13']",
"repo_doesnt_exist": "claimed repo indigoai-us/hq returns 404 on github.com",
"shared_repo_different_publisher": "repo 'git+https://github.com/indigoai-us/hq.git' also claimed by 2 package(s) under different publishers: ['npm/@indigoai-us/hq-cloud', 'npm/create-hq']"
},
"time": {
"created": "2026-02-16T18:12:55.339Z",
"modified": "2026-07-29T15:29:22.308Z"
}
}