for m0at/claudemd (ab-test-setup)
Identical content is a measurement, not a finding. Many packages are published under licences that permit redistribution, and a copy being identical says nothing about why it exists or whether it should.
2 registry rows carry byte-for-byte identical content, including this one.
Rows are grouped by their content only. A row that shares this one’s name but differs by a single byte is not in this group and keeps its own listing entry — that is what makes a republished version with something added stay separately visible.
m0at/claudemd is the only row whose repository account matches the identity recorded as its head commit's author. Git does not verify that identity, so this is an inference and not proof.
Git does not verify the identity recorded in a commit, and whoever published a repository is not necessarily whoever authored the commits in it.
Each row keeps its own listing entry and its own scanner results. This list intentionally shows no verdicts — open a row to see what its scanners found.
head 189e53e41a60
head d4d7e80f4d4d
Content fingerprint dd9d53e96412a910