// npm package

limit-size

Lightweight, Convenient, Fast command tool to control your file size, size-limit is too bloated.

npmjs.com tarball

versions

maintainers

license

MIT

first publish

2020-09-05

publisher

atool

tarball

21,514 B

AUTO-PUBLISHED·1 version indexed·latest published 2020-10-16

// publisher campaignby atool

9 caught packages from this account

This is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @0.1.4· no static-pattern hits

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@0.1.4·2020-10-16·AUTO-PUBLISHED·publisher: atool

heuristic 75/100

static flags 0

llm benign (0.85) via ollama

publisher-multi-name-burst:5osv-flagged:MAL-2026-4143

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· no static-pattern hits

--- install scripts ---
### prepublishOnly
npm run build



--- package.json (entry) ---
{
  "name": "limit-size",
  "version": "0.1.4",
  "description": "Lightweight, Convenient, Fast command tool to control your file size, size-limit is too bloated.",
  "license": "MIT",
  "bin": {
    "limit-size": "bin/index.js"
  },
  "files": [
    "bin"
  ],
  "scripts": {
    "lint-staged": "lint-staged",
    "size": "node ./bin/index.js",
    "test": "jest",
    "build": "rimraf ./bin && tsc --module commonjs --outDir bin",
    "prepublishOnly": "npm run build"
  },
  "dependencies": {
    "byte-parser": "^1.0.0",
    "chalk": "^4.1.0",
    "commander": "^6.1.0"
  },
  "keywords": [
    "limit-size",
    "size-limit"
  ],
  "devDependencies": {
    "@commitlint/cli": "^8.2.0",
    "@types/jest": "^26.0.13",
    "@types/node": "^14.6.4",
    "husky": "^3.0.5",
    "jest": "^26.4.2",
    "lint-staged": "^9.3.0",
    "prettier": "^1.18.2",
    "rimraf": "^3.0.2",
    "ts-jest": "^26.3.0",
    "typescript": "^3.9.7"
  },
  "jest": {
    "preset": "ts-jest",
    "collectCoverage": true,
    "testRegex": "(/__tests__/.*\\.(test|spec))\\.ts$",
    "collectCoverageFrom": [
      "src/**/*.ts"
    ]
  },
  "lint-staged": {
    "*.{ts,tsx}": [
      "prettier --write",
      "git add"
 

--- index.js (entry) ---
#!/usr/bin/env node
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
require("./cmd");