BEACON

← candidates

PyPI pulp-python-client @3.31.2

score
0.7947 high
flagged 2026-07-15 07:30
signals by category
content 1 topology 2

maintainers added:

package profile →

Signals fired

signalweightrationale
content
attestation_dropped 0.8 prior version(s) ['3.11.8', '3.12.9', '3.13.6'] carried PEP 740 attestations; 3.31.2 has none
topology
shared_repo_different_publisher 0.9 repo 'https://github.com/GIT_USER_ID/GIT_REPO_ID' also claimed by 8 package(s) under different publishers: ['PyPI/qanswer-sdk', 'PyPI/mgx', 'PyPI/iparapheur-internal'] ...
typosquat 1.0 combosquat of 'pulp'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "Pulp Team <pulp-list@redhat.com>"
  ],
  "versions": 94
}

Evidence (package doc at flag time)

{
  "author_email": "Pulp Team <pulp-list@redhat.com>",
  "classifiers": [],
  "home_page": null,
  "last_serial": 39021136,
  "latest_version": "3.31.2",
  "maintainer_email": null,
  "num_versions": 95,
  "project_urls": {
    "Repository": "https://github.com/GIT_USER_ID/GIT_REPO_ID"
  },
  "requires_dist_count": 5,
  "signal_details": {
    "attestation_dropped": "prior version(s) ['3.11.8', '3.12.9', '3.13.6'] carried PEP 740 attestations; 3.31.2 has none",
    "shared_repo_different_publisher": "repo 'https://github.com/GIT_USER_ID/GIT_REPO_ID' also claimed by 8 package(s) under different publishers: ['PyPI/qanswer-sdk', 'PyPI/mgx', 'PyPI/iparapheur-internal'] ...",
    "typosquat": "combosquat of 'pulp'"
  },
  "yanked": false,
  "yanked_reason": null
}