PyPI semgrep @1.168.0

score

0.7333 high

flagged 2026-06-24 14:38

signals by category

content 1 topology 2

maintainers added: —

Signals fired

signal	weight	rationale
content
attestation_dropped	0.8	prior version(s) ['1.160.0', '1.161.0', '1.162.0'] carried PEP 740 attestations; 1.168.0 has none
topology
sdist_only_diff	0.5	previous latest shipped a wheel; 1.168.0 ships sdist only
shared_repo_different_publisher	0.9	repo 'https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md' also claimed by 1 package(s) under different publishers: ['PyPI/tg-engine']

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "\"Semgrep Inc.\" <support@semgrep.com>"
  ],
  "versions": 345
}

Evidence (package doc at flag time)

{
  "author_email": "\"Semgrep Inc.\" <support@semgrep.com>",
  "classifiers": [
    "Environment :: Console",
    "Operating System :: MacOS",
    "Operating System :: Microsoft :: Windows",
    "Operating System :: POSIX :: Linux",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Programming Language :: Python :: 3.13",
    "Programming Language :: Python :: 3.14",
    "Topic :: Security",
    "Topic :: Software Development :: Quality Assurance"
  ],
  "home_page": null,
  "last_serial": 38359332,
  "latest_version": "1.168.0",
  "maintainer_email": null,
  "num_versions": 346,
  "project_urls": {
    "Changelog": "https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md",
    "Documentation": "https://semgrep.dev/docs",
    "Homepage": "https://semgrep.dev",
    "Issues": "https://github.com/semgrep/semgrep/issues",
    "Repository": "https://github.com/semgrep/semgrep"
  },
  "requires_dist_count": 27,
  "signal_details": {
    "attestation_dropped": "prior version(s) ['1.160.0', '1.161.0', '1.162.0'] carried PEP 740 attestations; 1.168.0 has none",
    "sdist_only_diff": "previous latest shipped a wheel; 1.168.0 ships sdist only",
    "shared_repo_different_publisher": "repo 'https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md' also claimed by 1 package(s) under different publishers: ['PyPI/tg-engine']"
  },
  "yanked": false,
  "yanked_reason": null
}