npm oacp-mcp @0.16.0
score
0.6538
med
flagged
2026-07-29 15:54
Signals fired
| signal | weight | rationale |
|---|---|---|
| cadence | ||
| rapid_release | 0.8 | 4 versions in last 24h: ['0.13.0', '0.14.0', '0.15.0', '0.16.0'] |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/matthewaharris/agora.git' also claimed by 1 package(s) under different publishers: ['npm/oacp-sdk'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"stait-ai"
],
"versions": 16
}
Evidence (package doc at flag time)
{
"dependencies_count": 3,
"dist": {
"integrity": "sha512-sda28aQ8k8lVgRt/5JPlfvzJaq7B+36iXD38uaWh02XHYHIG1heW/nuHAhAMoDxW+gdkDBYcRPux7PBVI7P7Hw==",
"tarball": "https://registry.npmjs.org/oacp-mcp/-/oacp-mcp-0.16.0.tgz",
"unpackedSize": 124878
},
"dist-tags": {
"latest": "0.16.0"
},
"latest_version": "0.16.0",
"maintainers": [
{
"email": "mharris26@gmail.com",
"name": "stait-ai"
}
],
"num_versions": 18,
"repository": {
"directory": "packages/oacp-mcp",
"type": "git",
"url": "git+https://github.com/matthewaharris/agora.git"
},
"scripts": {
"build": "tsc",
"lint": "tsc --noEmit",
"prepublishOnly": "npm run build",
"start": "node dist/index.js",
"test": "node scripts/smoke-test.mjs"
},
"signal_details": {
"rapid_release": "4 versions in last 24h: ['0.13.0', '0.14.0', '0.15.0', '0.16.0']",
"shared_repo_different_publisher": "repo 'git+https://github.com/matthewaharris/agora.git' also claimed by 1 package(s) under different publishers: ['npm/oacp-sdk']"
},
"time": {
"created": "2026-07-22T20:23:09.245Z",
"modified": "2026-07-29T20:54:06.300Z"
}
}