Loading the registry…
Identical content is a measurement, not a finding. Many packages are published under licences that permit redistribution, and a copy being identical says nothing about why it exists or whether it should.
2 registry rows carry byte-for-byte identical content, including this one.
Rows are grouped by their content only. A row that shares this one’s name but differs by a single byte is not in this group and keeps its own listing entry — that is what makes a republished version with something added stay separately visible.
The commit histories differ, but no evidence available identifies which of these came first.
We do not break this tie by star count, repository age, or the order we happened to index these rows. None of those measure where content came from, and each of them would produce a confident answer that can be wrong — so no row here is marked as the original.
Git does not verify the identity recorded in a commit, and whoever published a repository is not necessarily whoever authored the commits in it.
Each row keeps its own listing entry and its own scanner results. This list intentionally shows no verdicts — open a row to see what its scanners found.
head 40037741549e
Content fingerprint 5123c6322a9b1a54