PyPI odoo-addons-oca-hr-holidays @19.0.20260612.0
score
0.5392
med
flagged
2026-06-12 22:09
amplifiers
co-occurring signal pairs that lift the final score
- typosquat + stub_release: typosquat shape with active payload or stub-rush surface (+0.15)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| stub_release | 0.4 | info.description is empty/UNKNOWN with no summary |
| topology | ||
| no_repo | 0.3 | no github/gitlab/bitbucket URL in home_page or project_urls |
| new_dep_unknown | 0.5 | 1 new non-watchlisted requires_dist: ['odoo-addon-hr-holidays-natural-period'] |
| typosquat | 1.0 | combosquat of 'holidays' |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [],
"versions": 24
}
Evidence (package doc at flag time)
{
"author_email": null,
"classifiers": [
"Framework :: Odoo",
"Framework :: Odoo :: 19.0",
"Programming Language :: Python"
],
"home_page": null,
"last_serial": 37992284,
"latest_version": "19.0.20260612.0",
"maintainer_email": null,
"num_versions": 26,
"project_urls": null,
"requires_dist_count": 3,
"signal_details": {
"_amplifiers": [
"typosquat + stub_release: typosquat shape with active payload or stub-rush surface (+0.15)"
],
"new_dep_unknown": "1 new non-watchlisted requires_dist: ['odoo-addon-hr-holidays-natural-period']",
"no_repo": "no github/gitlab/bitbucket URL in home_page or project_urls",
"stub_release": "info.description is empty/UNKNOWN with no summary",
"typosquat": "combosquat of 'holidays'"
},
"yanked": false,
"yanked_reason": null
}