Loading the registry…
for mcp-server-efi
Identical content is a measurement, not a finding. Many packages are published under licences that permit redistribution, and a copy being identical says nothing about why it exists or whether it should.
2 registry rows carry byte-for-byte identical content, including this one.
Rows are grouped by their content only. A row that shares this one’s name but differs by a single byte is not in this group and keeps its own listing entry — that is what makes a republished version with something added stay separately visible.
JoaoLucasAl/mcp-server-efi is the only row whose repository account matches the identity recorded as its head commit's author. Git does not verify that identity, so this is an inference and not proof.
Git does not verify the identity recorded in a commit, and whoever published a repository is not necessarily whoever authored the commits in it.
Each row keeps its own listing entry and its own scanner results. This list intentionally shows no verdicts — open a row to see what its scanners found.
head ae7d40a8a16a
head 5d136ebee509
Content fingerprint 8ce4582eb8d5f3f9