PyPI pulp-certguard-client @3.114.1
score
0.8
high
flagged
2026-07-14 08:25
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| attestation_dropped | 0.8 | prior version(s) ['3.100.0', '3.101.0', '3.102.0'] carried PEP 740 attestations; 3.114.1 has none |
| cadence | ||
| rapid_release | 0.8 | 6 stable releases in last 24h: ['3.63.41', '3.73.38', '3.105.10', '3.114.1', '3.85.24'] |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/GIT_USER_ID/GIT_REPO_ID' also claimed by 10 package(s) under different publishers: ['PyPI/all-api-collection-sdk-v1', 'PyPI/legit-api-client', 'PyPI/nexium-exchangerpypi-token'] ... |
| typosquat | 1.0 | combosquat of 'pulp' |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"Pulp Team <pulp-list@redhat.com>"
],
"versions": 343
}
Evidence (package doc at flag time)
{
"author_email": "Pulp Team <pulp-list@redhat.com>",
"classifiers": [],
"home_page": null,
"last_serial": 38987509,
"latest_version": "3.114.1",
"maintainer_email": null,
"num_versions": 344,
"project_urls": {
"Repository": "https://github.com/GIT_USER_ID/GIT_REPO_ID"
},
"requires_dist_count": 5,
"signal_details": {
"attestation_dropped": "prior version(s) ['3.100.0', '3.101.0', '3.102.0'] carried PEP 740 attestations; 3.114.1 has none",
"rapid_release": "6 stable releases in last 24h: ['3.63.41', '3.73.38', '3.105.10', '3.114.1', '3.85.24']",
"shared_repo_different_publisher": "repo 'https://github.com/GIT_USER_ID/GIT_REPO_ID' also claimed by 10 package(s) under different publishers: ['PyPI/all-api-collection-sdk-v1', 'PyPI/legit-api-client', 'PyPI/nexium-exchangerpypi-token'] ...",
"typosquat": "combosquat of 'pulp'"
},
"yanked": false,
"yanked_reason": null
}