npm rsshub @1.0.0-master.cfcdc34
score
0.5333
med
flagged
2026-06-06 15:47
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=1.0.0-master.cfcdc34 but max published is 1.0.0 |
| dependency_added_unknown | 0.6 | 1 new non-watchlisted dep(s): ['patchright'] |
| enrichment | ||
| osv_advisory_active | 0.5 | deps.dev advisories: ['GHSA-2wqw-hr4f-xrhh', 'GHSA-jvxx-v45p-v5vf', 'GHSA-pgjj-866w-fc5c'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"diygod"
],
"versions": 5952
}
Evidence (package doc at flag time)
{
"dependencies_count": 83,
"dist": {
"integrity": "sha512-CDHoV+dKS/z6Fb2yB6xKBOevEhsk1GusuAShwrEz5Shor/lqLQZ8inL4l0MnJGTXmCsWqy77dc7ohaLdYcfxYw==",
"tarball": "https://registry.npmjs.org/rsshub/-/rsshub-1.0.0-master.cfcdc34.tgz",
"unpackedSize": 18626615
},
"dist-tags": {
"latest": "1.0.0-master.cfcdc34"
},
"latest_version": "1.0.0-master.cfcdc34",
"maintainers": [
{
"email": "diy.d.god@gmail.com",
"name": "diygod"
}
],
"num_versions": 5953,
"repository": {
"type": "git",
"url": "git+https://github.com/DIYgod/RSSHub.git"
},
"scripts": {
"build": "npm run build:routes && tsdown",
"build:docs": "npm run build:routes && tsx scripts/workflow/build-docs.ts",
"build:lib": "npm run build:routes && tsdown --config ./tsdown-lib.config.ts",
"build:routes": "cross-env NODE_ENV=dev tsx scripts/workflow/build-routes.ts",
"build:routes:worker": "cross-env NODE_ENV=dev WORKER_BUILD=true tsx scripts/workflow/build-routes.ts",
"container-build": "tsdown --config ./tsdown-container.config.ts",
"container-deploy": "npm run container-build && wrangler deploy --config wrangler-container.toml --containers-rollout=immediate",
"dev": "cross-env NODE_ENV=dev NODE_OPTIONS='--max-http-header-size=32768' tsx watch --inspect --clear-screen=false lib/index.ts",
"dev:cache": "cross-env NODE_ENV=production NODE_OPTIONS='--max-http-header-size=32768' tsx watch --clear-screen=false lib/index.ts",
"eslint": "eslint --cache . --concurrency auto",
"format": "oxlint --type-aware --fix . && oxfmt .",
"format:check": "oxlint --type-aware . && oxfmt . --check",
"format:description": "tsx scripts/workflow/format-description.ts",
"format:staged": "lint-staged",
"lint": "oxlint --type-aware .",
"profiling": "cross-env NODE_ENV=production tsx --prof lib/index.ts",
"start": "cross-env NODE_ENV=production NODE_OPTIONS='--max-http-header-size=32768' node dist/index.mjs",
"test": "npm run format:check && npm run vitest:coverage",
"vercel-build": "npm run build:routes && tsdown --config ./tsdown-vercel.config.ts",
"vitest": "cross-env NODE_ENV=test vitest",
"vitest:coverage": "cross-env NODE_ENV=test vitest --coverage.enabled --reporter=junit",
"vitest:fullroutes": "cross-env NODE_ENV=test FULL_ROUTES_TEST=true vitest --reporter=json --reporter=default --outputFile=\"./assets/build/test-full-routes.json\" routes",
"vitest:watch": "cross-env NODE_ENV=test vitest --watch",
"worker-build": "npm run build:routes:worker && tsdown --config ./tsdown-worker.config.ts",
"worker-deploy": "npm run worker-build && wrangler deploy",
"worker-dev": "npm run worker-build && wrangler dev",
"worker-test": "npm run worker-build && vitest run lib/worker.worker.test.ts"
},
"signal_details": {
"dependency_added_unknown": "1 new non-watchlisted dep(s): ['patchright']",
"dist_tag_anomaly": "dist-tags.latest=1.0.0-master.cfcdc34 but max published is 1.0.0",
"osv_advisory_active": "deps.dev advisories: ['GHSA-2wqw-hr4f-xrhh', 'GHSA-jvxx-v45p-v5vf', 'GHSA-pgjj-866w-fc5c']"
},
"time": {
"created": "2018-08-20T03:25:40.221Z",
"modified": "2026-06-06T18:45:44.945Z"
}
}