PyPI semgrep @1.169.0
score
0.85
high
flagged
2026-07-10 11:50
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| attestation_dropped | 0.8 | prior version(s) ['1.160.0', '1.161.0', '1.162.0'] carried PEP 740 attestations; 1.169.0 has none |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md' also claimed by 1 package(s) under different publishers: ['PyPI/tg-engine'] |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"\"Semgrep Inc.\" <support@semgrep.com>"
],
"versions": 346
}
Evidence (package doc at flag time)
{
"author_email": "\"Semgrep Inc.\" <support@semgrep.com>",
"classifiers": [
"Environment :: Console",
"Operating System :: MacOS",
"Operating System :: Microsoft :: Windows",
"Operating System :: POSIX :: Linux",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.13",
"Programming Language :: Python :: 3.14",
"Topic :: Security",
"Topic :: Software Development :: Quality Assurance"
],
"home_page": null,
"last_serial": 38864298,
"latest_version": "1.169.0",
"maintainer_email": null,
"num_versions": 347,
"project_urls": {
"Changelog": "https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md",
"Documentation": "https://semgrep.dev/docs",
"Homepage": "https://semgrep.dev",
"Issues": "https://github.com/semgrep/semgrep/issues",
"Repository": "https://github.com/semgrep/semgrep"
},
"requires_dist_count": 27,
"signal_details": {
"attestation_dropped": "prior version(s) ['1.160.0', '1.161.0', '1.162.0'] carried PEP 740 attestations; 1.169.0 has none",
"shared_repo_different_publisher": "repo 'https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md' also claimed by 1 package(s) under different publishers: ['PyPI/tg-engine']"
},
"yanked": false,
"yanked_reason": null
}