PyPI audit-test @0.3.8
score
0.518
med
flagged
2026-07-06 08:50
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| attestation_dropped | 0.8 | prior version(s) ['0.1.0', '0.2.4', '0.2.5'] carried PEP 740 attestations; 0.3.8 has none |
| cadence | ||
| rapid_release | 0.8 | 7 stable releases in last 24h: ['0.3.3', '0.3.4', '0.3.5', '0.3.6', '0.3.8'] |
| superseded_quickly | 0.9 | prior version 0.3.1 lived 6min upstream before being pulled |
| removed_within_window | 0.9 | version 0.3.1 was removed upstream ~738min ago |
| topology | ||
| no_repo | 0.3 | no github/gitlab/bitbucket URL in home_page or project_urls |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [],
"versions": 9
}
Evidence (package doc at flag time)
{
"author_email": null,
"classifiers": [],
"home_page": null,
"last_serial": 38711870,
"latest_version": "0.3.8",
"maintainer_email": null,
"num_versions": 10,
"project_urls": null,
"requires_dist_count": 10,
"signal_details": {
"attestation_dropped": "prior version(s) ['0.1.0', '0.2.4', '0.2.5'] carried PEP 740 attestations; 0.3.8 has none",
"no_repo": "no github/gitlab/bitbucket URL in home_page or project_urls",
"rapid_release": "7 stable releases in last 24h: ['0.3.3', '0.3.4', '0.3.5', '0.3.6', '0.3.8']",
"removed_within_window": "version 0.3.1 was removed upstream ~738min ago",
"superseded_quickly": "prior version 0.3.1 lived 6min upstream before being pulled"
},
"yanked": false,
"yanked_reason": null
}