Candidates
| eco | package | ver | score | signals | maint+ | seen ▼ |
|---|---|---|---|---|---|---|
| npm | @twin.org/rights-management-models | 0.9.0 | 0.6657 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, size_spike, dependency_added_unknown, repo_doesnt_exist
|
2026-07-03 01:16 | |
| npm | natureco-cli | 5.23.0 | 0.9 |
maintainer_churn, maintainer_takeover, rapid_release, repository_url_changed, dependency_added_unknown, repo_too_new_for_version_history
|
natureco1 | 2026-07-02 22:16 |
| PyPI | synpareia-trust-mcp | 0.6.3 | 0.5147 |
repository_url_changed, rapid_release
|
2026-07-02 22:05 | |
| PyPI | iris-security-sdk | 0.2.16 | 0.6525 |
repository_url_changed, shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-02 19:22 | |
| PyPI | iris-security-mcp | 0.2.16 | 0.549 |
repository_url_changed, shared_repo_different_publisher, repo_doesnt_exist
|
2026-07-02 19:22 | |
| PyPI | siyuan-cli | 1.1.0 | 0.5032 |
repository_url_changed, removed_within_window, repo_doesnt_exist
|
2026-07-02 13:15 | |
| PyPI | dbt-oracle | 1.11.1 | 0.5 |
repository_url_changed, requires_python_changed, new_dep_unknown, license_changed
|
2026-07-02 12:26 | |
| PyPI | html-to-markdown | 3.8.1 | 0.7333 |
repository_url_changed, typosquat, attestation_dropped
|
2026-07-02 08:35 | |
| PyPI | radiomcp | 1.2.9 | 0.6799 |
repository_url_changed, maintainer_email_changed, rapid_release, repo_too_new_for_version_history, attestation_dropped
|
Zeus <zeus@zeus.kim> | 2026-07-02 00:33 |
| PyPI | tha-aws-runner | 0.2.4 | 0.5418 |
repository_url_changed, yanked_recent, repo_too_new_for_version_history, attestation_dropped
|
2026-07-01 22:32 | |
| PyPI | toolatlas-mcp | 4.1.1 | 0.7118 |
repository_url_changed, maintainer_email_changed, repo_too_new_for_version_history
|
Shashi Kundan <shashikundan0001@gmail.com> | 2026-07-01 20:06 |
| PyPI | fagun | 0.8.0 | 0.525 |
repository_url_changed, rapid_release, repo_too_new_for_version_history, attestation_dropped
|
2026-07-01 18:47 | |
| PyPI | allianceauth-app-utils | 1.33.1 | 0.7579 |
repository_url_changed, maintainer_email_changed, repo_too_new_for_version_history
|
Erik Kalkoken <erik.kalkoken@gmail.com> | 2026-07-01 17:20 |
| PyPI | langchain-pymupdf4llm | 1.28.0 | 0.5193 |
repository_url_changed, requires_python_changed, maintainer_email_changed, typosquat
|
"Artifex Software, Inc." <info@artifex.com> | 2026-07-01 17:20 |
| PyPI | that-depends | 4.0.1 | 0.745 |
repository_url_changed, mass_publish_burst
|
2026-07-01 15:53 | |
| PyPI | rapidagent | 0.3.2 | 0.5345 |
repository_url_changed, maintainer_email_changed, repo_doesnt_exist
|
RapidAgent <gaurav@iapits.com> | 2026-07-01 15:04 |
| PyPI | responder | 7.3.0 | 0.75 |
repository_url_changed, rapid_release
|
2026-07-01 14:32 | |
| PyPI | pyrsx | 0.2.4 | 0.5258 |
repository_url_changed, maintainer_email_changed, attestation_dropped
|
Rohit Goswami <rgoswami@ieee.org>, Ruhila Goswami <ruhiresearcher209@gmail.com> | 2026-07-01 13:24 |
| PyPI | mima-governance | 0.3.4 | 0.5209 |
repository_url_changed, maintainer_email_changed, rapid_release, repo_too_new_for_version_history
|
Mima <sdk@mima.works> | 2026-07-01 10:32 |
| PyPI | forge-manager-mcp | 4.9.2 | 0.7944 |
repository_url_changed, maintainer_email_changed
|
Telejester <telejester@gmail.com> | 2026-06-30 21:36 |
| PyPI | bithuman | 2.3.11 | 0.5157 |
repository_url_changed, requires_python_changed, repo_too_new_for_version_history
|
2026-06-30 20:38 | |
| PyPI | cullinan | 0.93.post1 | 0.7883 |
repository_url_changed, maintainer_email_changed
|
cullinan@plumeink.com | 2026-06-30 19:00 |
| PyPI | kkf | 0.24 | 0.5329 |
repository_url_changed, requires_python_changed, new_dep_unknown, maintainer_email_changed
|
Diego Olguin-Wende <dolguin@dim.uchile.cl> | 2026-06-30 16:09 |
| PyPI | surblclient | 0.2.0 | 0.7345 |
repository_url_changed, maintainer_email_changed, dormant_burst
|
Filip Salo <filip@infix.se> | 2026-06-30 13:23 |
| PyPI | pls | 6.0.0.post1 | 0.7386 |
repository_url_changed, requires_python_changed, maintainer_email_changed, typosquat, attestation_dropped
|
hi@dhruvkb.dev | 2026-06-30 11:56 |
| PyPI | ud-resolver | 1.3.0 | 0.813 |
repository_url_changed, maintainer_email_changed, rapid_release, yanked_recent
|
Mohammad Zeeshan <zeeshansayfyebusiness@gmail.com> | 2026-06-30 08:24 |
| PyPI | ir | 0.1.27 | 0.6779 |
repository_url_changed, typosquat, repo_too_new_for_version_history
|
2026-06-30 07:55 | |
| PyPI | resourcecode | 2.1.0 | 0.5391 |
repository_url_changed, requires_python_changed, new_dep_unknown, license_changed, maintainer_email_changed, attestation_dropped
|
Nicolas Raillard <nicolas.raillard@ifremer.fr> | 2026-06-30 07:32 |
| PyPI | arl-env | 0.16.0 | 0.6324 |
repository_url_changed, rapid_release
|
2026-06-30 06:25 | |
| PyPI | ru-api-free | 1.3.0 | 0.5209 |
repository_url_changed, maintainer_email_changed, rapid_release, repo_too_new_for_version_history
|
Radoslaw <faharht1@users.noreply.github.com> | 2026-06-30 04:38 |
| PyPI | autogen | 0.14.1 | 0.7 |
repository_url_changed, size_spike, requires_python_changed, new_dep_unknown, license_changed, maintainer_email_changed, repo_too_new_for_version_history, attestation_dropped
|
Chi Wang & Qingyun Wu <support@ag2.ai> | 2026-06-29 21:45 |
| npm | @twin.org/trust-verifiers | 0.9.0 | 0.539 |
dist_tag_anomaly, repository_url_changed, provenance_dropped
|
2026-06-29 21:33 | |
| npm | @twin.org/trust-generators | 0.9.0 | 0.5269 |
dist_tag_anomaly, repository_url_changed, provenance_dropped
|
2026-06-29 21:17 | |
| npm | @twin.org/trust-service | 0.9.0 | 0.539 |
dist_tag_anomaly, repository_url_changed, provenance_dropped
|
2026-06-29 21:06 | |
| npm | @twin.org/trust-models | 0.9.0 | 0.5861 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, dependency_added_unknown, repo_doesnt_exist
|
2026-06-29 21:01 | |
| npm | @twin.org/messaging-service | 0.9.0 | 0.5561 |
dist_tag_anomaly, repository_url_changed, provenance_dropped
|
2026-06-29 20:29 | |
| npm | @twin.org/messaging-connector-entity-storage | 0.9.0 | 0.5591 |
dist_tag_anomaly, repository_url_changed, provenance_dropped
|
2026-06-29 20:29 | |
| npm | @twin.org/messaging-connector-aws | 0.9.0 | 0.5621 |
dist_tag_anomaly, repository_url_changed, provenance_dropped
|
2026-06-29 20:29 | |
| npm | @twin.org/messaging-models | 0.9.0 | 0.6324 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, repo_doesnt_exist
|
2026-06-29 20:29 | |
| PyPI | immunity-agent | 1.13.0 | 0.5128 |
repository_url_changed, new_dep_unknown, attestation_dropped
|
2026-06-29 19:02 | |
| npm | @twin.org/telemetry-rest-client | 0.9.0 | 0.5677 |
dist_tag_anomaly, repository_url_changed, provenance_dropped
|
2026-06-29 18:43 | |
| npm | @twin.org/telemetry-service | 0.9.0 | 0.5535 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, dependency_added_unknown
|
2026-06-29 18:38 | |
| npm | @twin.org/telemetry-connector-entity-storage | 0.9.0 | 0.5704 |
dist_tag_anomaly, repository_url_changed, provenance_dropped
|
2026-06-29 18:28 | |
| npm | @twin.org/telemetry-models | 0.9.0 | 0.6446 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, repo_doesnt_exist
|
2026-06-29 18:12 | |
| PyPI | django-admin-react | 1.13.1 | 0.6595 |
repository_url_changed, typosquat, repo_too_new_for_version_history, attestation_dropped
|
2026-06-29 17:38 | |
| PyPI | fiche-ppi | 0.1.2.2 | 0.5645 |
repository_url_changed, maintainer_email_changed, rapid_release, repo_doesnt_exist
|
Youssef ZEROUAL <youssef.zeroual87@gmail.com> | 2026-06-29 16:06 |
| npm | @twin.org/background-task-scheduler | 0.9.0 | 0.5291 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, dependency_added_unknown
|
2026-06-29 15:44 | |
| npm | @twin.org/background-task-models | 0.9.0 | 0.6698 |
dist_tag_anomaly, repository_url_changed, provenance_dropped, repo_doesnt_exist
|
2026-06-29 15:33 | |
| PyPI | geonode | 5.1.0 | 0.7333 |
repository_url_changed, new_dep_unknown, maintainer_email_changed
|
GeoNode Developers <dev@geonode.org> | 2026-06-29 10:50 |
| PyPI | synapse-layer | 2.4.2 | 0.5977 |
repository_url_changed, requires_python_changed, new_dep_unknown, maintainer_email_changed, attestation_dropped
|
Ismael Marchi <founder.synapselayer@proton.me> | 2026-06-29 07:03 |