Security Warning
This package has been flagged for security concerns. Do not install or use this package unless you have verified it is safe.
Malicious Package
MAL-2026-17847
Malicious code in npp-ml (PyPI)
Source: osv.dev · Flagged: 4 days ago
Version
Version
0.1.8 uploaded 2026-10-09 12:26 UTCVersion
0.1.10 uploaded 2026-10-13 08:08 UTC
Monthly downloads
1.3K
Weekly downloads
1.3K
GitHub stars
-
Downloads in the 30 and 7 days to October 10, 2026. Refreshed weekly.
Package Information
Latest Version
Requires Python
Not specified
Licence
Unknown
Last Release
3 days ago
First Release
October 8, 2026
Total Releases
2
Package Insights
Score based on PyPI data only - no linked source repository
N/A
Health Score
Not available
requires GitHub data
How the maintenance status was determined
Last release
2 days ago
Monthly downloads
1,271
•
Active
Activity within 30 days
Stable
Activity within 31-180 days
Minimal
Activity within 181-365 days, or no activity data
At Risk
No activity for > 365 days, but > 10,000 monthly downloads
Archived
Repository flagged as archived on GitHub
How the popularity category was determined
Monthly downloads
1,271
Stars
Unknown
Stars per 1k downloads
—
Industry Standard
> 10,000,000 monthly downloads
Hidden Gem
< 0.5 stars per 1k downloads and > 100,000 monthly downloads
Community Favorite
> 5 stars per 1k downloads
Rising Star
Balanced ratio of stars to downloads
•
Unknown
Fewer than 1,000 monthly downloads, or no star data
No star data — can't compute stars-to-downloads ratio.
How download momentum is calculated
Week daily avg
182
Month daily avg
42
Momentum
—
((week_daily_avg - month_daily_avg) / month_daily_avg) * 100Momentum not reported for packages with < 5,000 monthly downloads — percentages are noisy at low volume.
More insights and metrics
Python version support tiers
requires_python
Not specified
Cutting Edge
Minimum supported version is 3.14 or newer
Modern
Minimum supported version is 3.11 to 3.13
Legacy
Supports 3.10 or older (or Python 2)
•
Unknown
No requires_python specified or unparseable
Package does not declare a minimum Python version.
License categories
License
Not specified
Permissive
MIT, Apache, BSD, ISC, Unlicense, CC0, etc.
Copyleft
GPL, LGPL, AGPL, MPL, EPL, etc.
Proprietary
Commercial, all rights reserved, custom EULAs
•
Unknown
No license specified, or none of the above match
Package does not declare a license.
How the release cadence was determined
Last release
2 days ago
Total releases
2
Releases/year
104.3
•
Rapid
Last release within 365 days and > 12 releases/year
Regular
Last release within 365 days
Slow
Last release 366-730 days ago
Stalled
Last release > 730 days ago, or no releases
Unknown
No usable release date available
How contributor risk was determined
Contributors
Unknown
Monthly downloads
1,271
High Load
≤ 2 contributors and ≥ 50,000 monthly downloads
Moderate Load
< 10 contributors and ≥ 500,000 monthly downloads
Low Load
< 25 contributors and ≥ 5,000,000 monthly downloads, or sole maintainer with ≥ 10,000 monthly downloads
Balanced
Enough contributors for the package's popularity
•
Unknown
No contributor data available
Contributor count is missing — this usually indicates the package has no linked GitHub repository.
Engagement
0
Issue Burden
-
per 1k stars
Discussions
-
per 1k stars
Fork Ratio
-
contrib / forks
Stale Release
No
PR Velocity
-
Not all downloads include detailed metadata. Breakdowns reflect the subset that does.
Downloads by OS
Linux
4
Python Versions
3.11
25.0%
1
3.12
25.0%
1
3.13
25.0%
1
3.8
25.0%
1
Top Countries
1.
US
15
US
2.
FR
4
FR
3.
JP
4
JP
4.
DK
3
DK
5.
GB
2
GB
6.
SE
2
SE
7.
CN
1
CN
8.
KR
1
KR
9.
NO
1
NO
Weekly Downloads
GitHub Stars
Repository details
Forks
-
Issues
-
Last Commit
-
Contributors
-
Open PRs
-
Archived
-