{
 "measured_at": "2026-11-12T09:12:15Z",
 "tokenizer": "o200k_base",
 "rows": [
  {
   "target": "npm:postmark-mcp@1.0.18",
   "headline": "{\"ok\":true,\"v\":\"deny\",\"enforce\":\"block\",\"why\":\"Do not install postmark-mcp@1.0.18: malicious-package report MAL-2025-47604 (This package tur",
   "kd_text": 213,
   "kd_full": 467,
   "kd_compact": 251,
   "diy_min": 987,
   "diy_full": 987,
   "osv": 413,
   "reg_version_status": 404,
   "reg_full_status": 200
  },
  {
   "target": "npm:mcp-remote@0.1.15",
   "headline": "{\"ok\":true,\"v\":\"warn\",\"enforce\":\"ask\",\"why\":\"Caution before you install mcp-remote@0.1.15: 1 published advisory affects mcp-remote@0.1.15.\",",
   "kd_text": 158,
   "kd_full": 358,
   "kd_compact": 191,
   "diy_min": 1413,
   "diy_full": 143127,
   "osv": 502,
   "reg_version_status": 200,
   "reg_full_status": 200
  },
  {
   "target": "npm:vm2@3.9.17",
   "headline": "{\"ok\":true,\"v\":\"warn\",\"enforce\":\"ask\",\"why\":\"Caution before you install vm2@3.9.17: 56 published advisories affect vm2@3.9.17.\",\"source\":\"re",
   "kd_text": 323,
   "kd_full": 689,
   "kd_compact": 360,
   "diy_min": 88548,
   "diy_full": 176484,
   "osv": 87222,
   "reg_version_status": 200,
   "reg_full_status": 200
  },
  {
   "target": "npm:lodash@4.17.20",
   "headline": "{\"ok\":true,\"v\":\"warn\",\"enforce\":\"ask\",\"why\":\"Caution before you install lodash@4.17.20: 4 published advisories affect lodash@4.17.20.\",\"sour",
   "kd_text": 185,
   "kd_full": 411,
   "kd_compact": 223,
   "diy_min": 9011,
   "diy_full": 102296,
   "osv": 7817,
   "reg_version_status": 200,
   "reg_full_status": 200
  },
  {
   "target": "npm:axios@1.6.0",
   "headline": "{\"ok\":true,\"v\":\"warn\",\"enforce\":\"ask\",\"why\":\"Caution before you install axios@1.6.0: Malicious-package report MAL-2026-2307 covers other rel",
   "kd_text": 307,
   "kd_full": 656,
   "kd_compact": 346,
   "diy_min": 81023,
   "diy_full": 383159,
   "osv": 78563,
   "reg_version_status": 200,
   "reg_full_status": 200
  },
  {
   "target": "npm:express@4.17.1",
   "headline": "{\"ok\":true,\"v\":\"warn\",\"enforce\":\"ask\",\"why\":\"Caution before you install express@4.17.1: 2 published advisories affect express@4.17.1. Fixed ",
   "kd_text": 304,
   "kd_full": 657,
   "kd_compact": 351,
   "diy_min": 3630,
   "diy_full": 312250,
   "osv": 1759,
   "reg_version_status": 200,
   "reg_full_status": 200
  },
  {
   "target": "npm:@modelcontextprotocol/server-filesystem@2025.8.21",
   "headline": "{\"ok\":true,\"v\":\"warn\",\"enforce\":\"care\",\"why\":\"Caution before you install @modelcontextprotocol/server-filesystem@2025.8.21: the publisher de",
   "kd_text": 234,
   "kd_full": 512,
   "kd_compact": 274,
   "diy_min": 780,
   "diy_full": 31623,
   "osv": 1,
   "reg_version_status": 200,
   "reg_full_status": 200
  },
  {
   "target": "npm:left-pad@1.3.0",
   "headline": "{\"ok\":true,\"v\":\"warn\",\"enforce\":\"care\",\"why\":\"Caution before you install left-pad@1.3.0: The publisher deprecated left-pad (npm): \\\"use Stri",
   "kd_text": 94,
   "kd_full": 225,
   "kd_compact": 128,
   "diy_min": 607,
   "diy_full": 9090,
   "osv": 1,
   "reg_version_status": 200,
   "reg_full_status": 200
  },
  {
   "target": "pypi:requests==2.31.0",
   "headline": "{\"ok\":true,\"v\":\"warn\",\"enforce\":\"ask\",\"why\":\"Caution before you install requests==2.31.0: 3 published advisories affect requests@2.31.0.\",\"s",
   "kd_text": 165,
   "kd_full": 371,
   "kd_compact": 203,
   "diy_min": 13021,
   "diy_full": 91902,
   "osv": 9644,
   "reg_version_status": 200,
   "reg_full_status": 200
  },
  {
   "target": "pypi:jinja2==3.1.2",
   "headline": "{\"ok\":true,\"v\":\"warn\",\"enforce\":\"ask\",\"why\":\"Caution before you install jinja2==3.1.2: 5 published advisories affect jinja2@3.1.2. Fixed in ",
   "kd_text": 386,
   "kd_full": 823,
   "kd_compact": 435,
   "diy_min": 13563,
   "diy_full": 43135,
   "osv": 9569,
   "reg_version_status": 200,
   "reg_full_status": 200
  },
  {
   "target": "pypi:pyyaml==5.3",
   "headline": "{\"ok\":true,\"v\":\"warn\",\"enforce\":\"ask\",\"why\":\"Caution before you install pyyaml==5.3: 2 published advisories affect pyyaml@5.3. Fixed in 5.4.",
   "kd_text": 255,
   "kd_full": 565,
   "kd_compact": 308,
   "diy_min": 8373,
   "diy_full": 253333,
   "osv": 3187,
   "reg_version_status": 200,
   "reg_full_status": 200
  },
  {
   "target": "pypi:django==4.2.0",
   "headline": "{\"ok\":true,\"v\":\"unverified_existence\",\"enforce\":\"ask\",\"why\":\"Cannot establish that django==4.2.0 exists on pypi. Ask your person before you ",
   "kd_text": 428,
   "kd_full": 914,
   "kd_compact": 484,
   "diy_min": 149843,
   "diy_full": 402625,
   "osv": 127594,
   "reg_version_status": 200,
   "reg_full_status": 200
  },
  {
   "target": "pypi:rsquests",
   "headline": "{\"ok\":true,\"v\":\"deny\",\"enforce\":\"block\",\"why\":\"Do not install rsquests: malicious-package report MAL-2026-5304 covers its releases, and PyPI",
   "kd_text": 111,
   "kd_full": 261,
   "kd_compact": 147,
   "diy_min": 2065,
   "diy_full": 2065,
   "osv": 2058,
   "reg_version_status": 404,
   "reg_full_status": 404
  }
 ]
}