BEACON

← candidates

PyPI mrbokeh @1.0.6

score
0.5047 med
flagged 2026-06-26 05:18
signals by category
content 2 cadence 1 topology 2

maintainers added:

package profile →

amplifiers co-occurring signal pairs that lift the final score

Signals fired

signalweightrationale
content
size_spike 0.5 sdist size 7944 -> 6378574 (802.9×)
stub_release 0.4 info.description is empty/UNKNOWN with no summary
cadence
rapid_release 0.8 7 stable releases in last 24h: ['1.0.2', '1.0.3', '1.0.4', '1.0.5', '1.0.6']
topology
no_repo 0.3 no github/gitlab/bitbucket URL in home_page or project_urls
typosquat 1.0 combosquat of 'bokeh'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [],
  "versions": 5
}

Evidence (package doc at flag time)

{
  "author_email": null,
  "classifiers": [],
  "home_page": null,
  "last_serial": 38411797,
  "latest_version": "1.0.6",
  "maintainer_email": null,
  "num_versions": 7,
  "project_urls": null,
  "requires_dist_count": 3,
  "signal_details": {
    "_amplifiers": [
      "typosquat + stub_release: typosquat shape with active payload or stub-rush surface (+0.15)"
    ],
    "no_repo": "no github/gitlab/bitbucket URL in home_page or project_urls",
    "rapid_release": "7 stable releases in last 24h: ['1.0.2', '1.0.3', '1.0.4', '1.0.5', '1.0.6']",
    "size_spike": "sdist size 7944 -> 6378574 (802.9\u00d7)",
    "stub_release": "info.description is empty/UNKNOWN with no summary",
    "typosquat": "combosquat of 'bokeh'"
  },
  "yanked": false,
  "yanked_reason": null
}