When the code contain "from pyrpm...", some IDE (PyCharm for example) will install and import "pyrpm".
Seems legit, but it will actually install https://pypi.org/project/pyrpm/
It could be possible to document, add some kind of warning, or change the name.