Detected presence of software components that were removed from the public package repository. (x1)

Detected presence of software components that had a recent malware or tampering incident. (x1)

Detected presence of malicious files through analyst-vetted file reputation. (x2)

Detected presence of known software supply chain attack artifacts. (x2)

Detected presence of software components without a declared source code repository. (x1)

Detected presence of software components that are rarely included by other public software packages. (x1)

Detected presence of software components that have low popularity or number of downloads. (x1)

Detected presence of software components that had a recent package version removal incident. (x1)

Detected presence of medium severity vulnerabilities. (x1)

Detected presence of software components with potentially unwanted dependencies. (x1)