PyPI pulpcore-client @3.114.0

score

0.8667 high

flagged 2026-07-14 08:22

signals by category

topology 2 enrichment 1

maintainers added: —

Signals fired

signal	weight	rationale
topology
shared_repo_different_publisher	0.9	repo 'https://github.com/GIT_USER_ID/GIT_REPO_ID' also claimed by 10 package(s) under different publishers: ['PyPI/legit-api-client', 'PyPI/nexium-exchangerpypi-token', 'PyPI/nexium-exchanger'] ...
typosquat	1.0	combosquat of 'pulp'
enrichment
repo_doesnt_exist	1.0	claimed repo GIT_USER_ID/GIT_REPO_ID returns 404 on github.com

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "Pulp Team <pulp-list@redhat.com>"
  ],
  "versions": 679
}

Evidence (package doc at flag time)

{
  "author_email": "Pulp Team <pulp-list@redhat.com>",
  "classifiers": [],
  "home_page": null,
  "last_serial": 38987371,
  "latest_version": "3.114.0",
  "maintainer_email": null,
  "num_versions": 680,
  "project_urls": {
    "Repository": "https://github.com/GIT_USER_ID/GIT_REPO_ID"
  },
  "requires_dist_count": 5,
  "signal_details": {
    "repo_doesnt_exist": "claimed repo GIT_USER_ID/GIT_REPO_ID returns 404 on github.com",
    "shared_repo_different_publisher": "repo 'https://github.com/GIT_USER_ID/GIT_REPO_ID' also claimed by 10 package(s) under different publishers: ['PyPI/legit-api-client', 'PyPI/nexium-exchangerpypi-token', 'PyPI/nexium-exchanger'] ...",
    "typosquat": "combosquat of 'pulp'"
  },
  "yanked": false,
  "yanked_reason": null
}