PyPI trustgraph-cli @2.7.8
score
0.8
high
flagged
2026-07-15 18:33
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| attestation_dropped | 0.8 | prior version(s) ['0.0.0', '0.0.1', '0.0.2'] carried PEP 740 attestations; 2.7.8 has none |
| cadence | ||
| rapid_release | 0.8 | 3 stable releases in last 24h: ['2.6.18', '2.7.7', '2.7.8'] |
| topology | ||
| mass_publish_burst | 0.8 | publisher '"trustgraph.ai" <security@trustgraph.ai>' pushed 5 packages in the last 15min on PyPI |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"\"trustgraph.ai\" <security@trustgraph.ai>"
],
"versions": 498
}
Evidence (package doc at flag time)
{
"author_email": "\"trustgraph.ai\" <security@trustgraph.ai>",
"classifiers": [
"Operating System :: OS Independent",
"Programming Language :: Python :: 3"
],
"home_page": null,
"last_serial": 39038820,
"latest_version": "2.7.8",
"maintainer_email": null,
"num_versions": 500,
"project_urls": {
"Homepage": "https://github.com/trustgraph-ai/trustgraph"
},
"requires_dist_count": 8,
"signal_details": {
"attestation_dropped": "prior version(s) ['0.0.0', '0.0.1', '0.0.2'] carried PEP 740 attestations; 2.7.8 has none",
"mass_publish_burst": "publisher '\"trustgraph.ai\" <security@trustgraph.ai>' pushed 5 packages in the last 15min on PyPI",
"rapid_release": "3 stable releases in last 24h: ['2.6.18', '2.7.7', '2.7.8']"
},
"yanked": false,
"yanked_reason": null
}