PyPI cerberus-ai @1.5.4

score

0.59 med

flagged 2026-07-25 05:34

signals by category

identity 1 topology 2 enrichment 1

maintainers added: Odingard <security@odingard.com>

package profile →

amplifiers co-occurring signal pairs that lift the final score

repository_url_changed + maintainer_email_changed: repo ownership claim shifted during identity churn (+0.10)

Signals fired

signal	weight	rationale
identity
maintainer_email_changed	0.7	new identity email(s): ['Odingard <security@odingard.com>']
topology
repository_url_changed	0.7	'https://github.com/Odingard/cerberus-core/issues' -> 'https://github.com/Odingard/cerberus-core#readme'
typosquat	1.0	combosquat of 'cerberus'
enrichment
repo_too_new_for_version_history	0.7	claimed repo created 27d ago but package has 11 versions (expect >= 62d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "Six Sense Enterprise Services <security@sixsenseenterprise.com>"
  ],
  "versions": 9
}

Evidence (package doc at flag time)

{
  "author_email": "Odingard <security@odingard.com>",
  "classifiers": [
    "Development Status :: 5 - Production/Stable",
    "Intended Audience :: Developers",
    "Intended Audience :: Information Technology",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Programming Language :: Python :: 3.13",
    "Topic :: Security",
    "Topic :: Software Development :: Libraries :: Python Modules",
    "Typing :: Typed"
  ],
  "home_page": null,
  "last_serial": 39359601,
  "latest_version": "1.5.4",
  "maintainer_email": null,
  "num_versions": 11,
  "project_urls": {
    "Documentation": "https://github.com/Odingard/cerberus-core#readme",
    "Homepage": "https://www.odingard.com",
    "Issues": "https://github.com/Odingard/cerberus-core/issues",
    "Repository": "https://github.com/Odingard/cerberus-core"
  },
  "requires_dist_count": 36,
  "signal_details": {
    "_amplifiers": [
      "repository_url_changed + maintainer_email_changed: repo ownership claim shifted during identity churn (+0.10)"
    ],
    "maintainer_email_changed": "new identity email(s): ['Odingard <security@odingard.com>']",
    "repo_too_new_for_version_history": "claimed repo created 27d ago but package has 11 versions (expect >= 62d for that history)",
    "repository_url_changed": "'https://github.com/Odingard/cerberus-core/issues' -> 'https://github.com/Odingard/cerberus-core#readme'",
    "typosquat": "combosquat of 'cerberus'"
  },
  "yanked": false,
  "yanked_reason": null
}