chore: add perseus-ctx and mimir-mcp to popular PyPI packages#126
Merged
Conversation
Adds Perseus and Mimir to the _POPULAR_PYPI set used by SC6 typosquat detection. These are established MCP ecosystem packages (>1K downloads) that should not be flagged as potential typosquats. Including them also helps protect the package names from typosquatting confusion. Signed-off-by: Perseus Computing <51974392+tcconnally@users.noreply.github.com>
rng1995
approved these changes
Jun 21, 2026
rng1995
left a comment
rng1995
left a comment
Collaborator
There was a problem hiding this comment.
APPROVE — data-only addition of two names to the popular-package set used by SC6 typosquat detection. Low-risk and easily reversible.
The set is used both to treat exact matches as known-good and as the reference list that near-miss names (Levenshtein ≤ 2) are flagged against, so the additions are well-formed.
Minor / optional (non-blocking):
- Please confirm these two names belong in the popular / known-good baseline (i.e. they are widely used or are packages you intend to protect), since membership both whitelists the exact names and turns them into typosquat anchors.
- Because SC6 flags anything within edit distance 2, short names that share a common suffix (e.g.
-mcp,-ctx) can collide with other legitimately-named packages and produce false positives. Worth watching if users report SC6 noise. - Nit: the surrounding entries look roughly grouped; the new entries are appended out of order. Purely cosmetic since it is a
set.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Add
perseus-ctxandmimir-mcpto_POPULAR_PYPI, the set used by SC6 typosquat detection to identify well-known packages.Why
perseus-ctxandmimir-mcpare established MCP ecosystem packages on PyPIperseus-ctx(context engine, 27+ MCP tools) andmimir-mcp(persistent memory, 36+ MCP tools) serve hundreds of agent installationsTesting
All 621 tests pass. No functional changes — data-only addition.