PyPI sast @1.6.8

score

0.5139 med

flagged 2026-06-30 06:15

signals by category

content 1 topology 2

maintainers added: —

Signals fired

signal	weight	rationale
content
attestation_dropped	0.8	prior version(s) ['0.1.0', '0.1.1', '1.5.0'] carried PEP 740 attestations; 1.6.8 has none
topology
no_repo	0.3	no github/gitlab/bitbucket URL in home_page or project_urls
typosquat	1.0	lev=1 to watched 'gast'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [],
  "versions": 12
}

Evidence (package doc at flag time)

{
  "author_email": null,
  "classifiers": [
    "Development Status :: 4 - Beta",
    "Environment :: Console",
    "Intended Audience :: Developers",
    "Operating System :: OS Independent",
    "Programming Language :: Python :: 3",
    "Topic :: Security",
    "Topic :: Software Development :: Quality Assurance"
  ],
  "home_page": null,
  "last_serial": 38521928,
  "latest_version": "1.6.8",
  "maintainer_email": null,
  "num_versions": 13,
  "project_urls": {
    "Homepage": "https://insom.ai"
  },
  "requires_dist_count": 1,
  "signal_details": {
    "attestation_dropped": "prior version(s) ['0.1.0', '0.1.1', '1.5.0'] carried PEP 740 attestations; 1.6.8 has none",
    "no_repo": "no github/gitlab/bitbucket URL in home_page or project_urls",
    "typosquat": "lev=1 to watched 'gast'"
  },
  "yanked": false,
  "yanked_reason": null
}