PyPI pulp-file-client @3.115.2
score
0.85
high
flagged
2026-07-28 15:39
Signals fired
| signal | weight | rationale |
|---|---|---|
| cadence | ||
| superseded_quickly | 0.9 | prior version 3.63.44 lived 1min upstream before being pulled |
| removed_within_window | 0.9 | version 3.63.44 was removed upstream ~0min ago |
| topology | ||
| shared_repo_different_publisher | 0.9 | repo 'https://github.com/GIT_USER_ID/GIT_REPO_ID' also claimed by 8 package(s) under different publishers: ['PyPI/mgx', 'PyPI/linkbreakers', 'PyPI/authentik-client'] ... |
| typosquat | 1.0 | combosquat of 'pulp' |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"Pulp Team <pulp-list@redhat.com>"
],
"versions": 390
}
Evidence (package doc at flag time)
{
"author_email": "Pulp Team <pulp-list@redhat.com>",
"classifiers": [],
"home_page": null,
"last_serial": 39465467,
"latest_version": "3.115.2",
"maintainer_email": null,
"num_versions": 390,
"project_urls": {
"Repository": "https://github.com/GIT_USER_ID/GIT_REPO_ID"
},
"requires_dist_count": 4,
"signal_details": {
"removed_within_window": "version 3.63.44 was removed upstream ~0min ago",
"shared_repo_different_publisher": "repo 'https://github.com/GIT_USER_ID/GIT_REPO_ID' also claimed by 8 package(s) under different publishers: ['PyPI/mgx', 'PyPI/linkbreakers', 'PyPI/authentik-client'] ...",
"superseded_quickly": "prior version 3.63.44 lived 1min upstream before being pulled",
"typosquat": "combosquat of 'pulp'"
},
"yanked": false,
"yanked_reason": null
}