npm cbor-extract @2.2.3
score
0.9
high
flagged
2026-11-06 01:08
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| new_install_script | 1.0 | first time ['install'] present |
| topology | ||
| mass_publish_burst | 0.8 | publisher 'kriszyp' pushed 8 packages in the last 15min on npm |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [],
"versions": 0
}
Evidence (package doc at flag time)
{
"dependencies_count": 1,
"dist": {
"integrity": "sha512-zTOCEYwiQDChj5DV/sUqccv3jhdZqbhymztwcrW2LncIG2fPPkb1ceK5rmr0bdtxzJCXoWzZ95shA+uaSH8cKw==",
"tarball": "https://registry.npmjs.org/cbor-extract/-/cbor-extract-2.2.3.tgz",
"unpackedSize": 13387
},
"dist-tags": {
"latest": "2.2.3"
},
"latest_version": "2.2.3",
"maintainers": [
{
"email": "kriszyp@gmail.com",
"name": "kriszyp"
}
],
"num_versions": 17,
"repository": {
"type": "git",
"url": "git+ssh://git@github.com/kriszyp/cbor-extract.git"
},
"scripts": {
"before-publish": "prebuildify-ci download && node set-optional-deps.cjs",
"install": "node-gyp-build-optional-packages",
"prebuild": "prebuildify-platform-packages --target 24.14.0",
"prebuild-libc": "prebuildify-platform-packages --tag-libc --target 24.14.0 && ENABLE_V8_FUNCTIONS=false prebuildify-platform-packages --platform-packages --napi --tag-libc --target 20.20.0",
"prebuild-libc-alpine": "ENABLE_V8_FUNCTIONS=false prebuildify-cross --image alpine --tag-libc --napi --target 20.20.0",
"prebuild-macos": "prebuildify-platform-packages --target 24.14.0 && ENABLE_V8_FUNCTIONS=false prebuildify-platform-packages --napi --platform-packages --target 20.20.0",
"prebuild-win32": "set ENABLE_V8_FUNCTIONS=false&& prebuildify-platform-packages --platform-packages --napi --target 20.20.0",
"publish-all": "cd prebuilds/darwin-x64 && npm publish --access public && cd ../darwin-arm64 && npm publish --access public && cd ../linux-x64 && npm publish --access public && cd ../linux-arm64 && npm publish --access public && cd ../linux-arm && npm publish --access public && cd ../.. && npm publish --access public",
"recompile": "node-gyp rebuild",
"test": "node ./index.js && node test/scan.cjs && node test/strings.cjs"
},
"signal_details": {
"mass_publish_burst": "publisher 'kriszyp' pushed 8 packages in the last 15min on npm",
"new_install_script": "first time ['install'] present"
},
"time": {
"created": "2020-11-28T01:11:03.203Z",
"modified": "2026-11-02T02:27:21.956Z"
}
}