{"ecosystem":"pypi","ecosystem_label":"PyPI","indexed_repositories":9857,"inspected_repositories":9856,"monthly_downloads":53487079329,"median_score":69,"share_good_or_better":0.5656,"computed_at":"2026-09-08T09:12:53.556101Z","bands":[{"band":"exceptional","repositories":1133,"monthly_downloads":25390379794},{"band":"excellent","repositories":2408,"monthly_downloads":12620911312},{"band":"good","repositories":2034,"monthly_downloads":7568741389},{"band":"moderate","repositories":2038,"monthly_downloads":3290290628},{"band":"weak","repositories":964,"monthly_downloads":1003864017},{"band":"at_risk","repositories":918,"monthly_downloads":3190861949},{"band":"critical","repositories":361,"monthly_downloads":422030240}],"histogram":[{"start":0,"count":14},{"start":5,"count":26},{"start":10,"count":62},{"start":15,"count":259},{"start":20,"count":192},{"start":25,"count":303},{"start":30,"count":423},{"start":35,"count":310},{"start":40,"count":286},{"start":45,"count":368},{"start":50,"count":667},{"start":55,"count":648},{"start":60,"count":723},{"start":65,"count":765},{"start":70,"count":467},{"start":75,"count":802},{"start":80,"count":969},{"start":85,"count":860},{"start":90,"count":1037},{"start":95,"count":675}],"categories":[{"key":"vitality","name":"Vitality","median":74,"record_median":71,"repositories":9857},{"key":"community","name":"Community & Adoption","median":56,"record_median":45,"repositories":9857},{"key":"governance","name":"Sustainability & Governance","median":63,"record_median":59,"repositories":9857},{"key":"engineering","name":"Engineering Quality","median":76,"record_median":65,"repositories":9857},{"key":"security","name":"Security","median":51,"record_median":47,"repositories":9857},{"key":"ai_readiness","name":"AI Readiness","median":55,"record_median":53,"repositories":9857}],"practices":[{"key":"readme","label":"README","share":0.9481,"repositories":9856},{"key":"license","label":"License detected","share":0.9608,"repositories":9856},{"key":"ci","label":"CI workflows","share":0.8888,"repositories":9856},{"key":"tests","label":"Automated tests","share":0.9357,"repositories":9856},{"key":"linter","label":"Linter configuration","share":0.592,"repositories":9856},{"key":"docs_dir","label":"Documentation directory","share":0.6722,"repositories":9856},{"key":"contributing","label":"Contributing guide","share":0.4627,"repositories":9856},{"key":"security_policy","label":"Security policy","share":0.2296,"repositories":9856},{"key":"code_of_conduct","label":"Code of conduct","share":0.2601,"repositories":9856},{"key":"agent_instructions","label":"AI agent instructions","share":0.2715,"repositories":9856},{"key":"bootstrap","label":"One-command bootstrap","share":0.5073,"repositories":9856},{"key":"llms_txt","label":"llms.txt","share":0.0682,"repositories":9856}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":5830,"median_score":78},{"key":"user","label":"Personal accounts","repositories":4026,"median_score":59}],"bus_factor":[{"bucket":"1","repositories":6878},{"bucket":"2","repositories":1667},{"bucket":"3–5","repositories":1022},{"bucket":"6+","repositories":256}],"single_maintainer_share":0.7002,"single_maintainer_high_reliance":793,"licenses":[{"license":"MIT","state":"standard","repositories":3937},{"license":"Apache-2.0","state":"standard","repositories":2337},{"license":null,"state":"custom","repositories":1302},{"license":"BSD-3-Clause","state":"standard","repositories":680},{"license":"GPL-3.0","state":"standard","repositories":409},{"license":null,"state":"absent","repositories":386},{"license":"AGPL-3.0","state":"standard","repositories":234},{"license":"BSD-2-Clause","state":"standard","repositories":145},{"license":"LGPL-3.0","state":"standard","repositories":99},{"license":"MPL-2.0","state":"standard","repositories":88}],"ecosystems":[],"top_repositories":[{"id":10000,"full_name":"pypa/packaging","url":"https://github.com/pypa/packaging","description":"Core utilities for Python packages","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":[],"license_spdx":null,"license_state":"custom","stars":746,"forks":315,"watchers":26,"monthly_downloads":2105765104,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-08-04T17:28:56.382960Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"","icon_source_type":null,"badge_url":""},{"id":10007,"full_name":"urllib3/urllib3","url":"https://github.com/urllib3/urllib3","description":"urllib3 is a user-friendly HTTP client library for Python","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":["http","http-client","python","urllib3","filepost","httplib","https","pooling","ssl","threadsafe","urllib"],"license_spdx":"MIT","license_state":"standard","stars":4052,"forks":1538,"watchers":97,"monthly_downloads":1855397242,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-08-28T08:46:46.604968Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/urllib3/urllib3?v=5837a04d-1","icon_source_type":"tree","badge_url":""},{"id":10009,"full_name":"kjd/idna","url":"https://github.com/kjd/idna","description":"Internationalized Domain Names for Python (IDNA 2008 and UTS #46)","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":["python","idna","dns","unicode"],"license_spdx":"BSD-3-Clause","license_state":"standard","stars":288,"forks":126,"watchers":11,"monthly_downloads":1703636197,"latest_score":83,"latest_band":"excellent","latest_scanned_at":"2026-08-04T17:31:40.721472Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"","icon_source_type":null,"badge_url":""},{"id":9998,"full_name":"psf/requests","url":"https://github.com/psf/requests","description":"A simple, yet elegant, HTTP library.","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":["python","http","forhumans","requests","python-requests","client","humans","cookies"],"license_spdx":"Apache-2.0","license_state":"standard","stars":54210,"forks":10068,"watchers":1305,"monthly_downloads":1687407494,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-08-04T18:26:15.739010Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/psf/requests?v=6cac66b3-1","icon_source_type":"avatar","badge_url":""},{"id":10005,"full_name":"numpy/numpy","url":"https://github.com/numpy/numpy","description":"The fundamental package for scientific computing with Python.","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python","C"],"topics":["numpy","python"],"license_spdx":null,"license_state":"custom","stars":32485,"forks":12613,"watchers":602,"monthly_downloads":1100842152,"latest_score":100,"latest_band":"exceptional","latest_scanned_at":"2026-08-04T18:26:16.365571Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"organic","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/numpy/numpy?v=1a81281c-1","icon_source_type":"homepage","badge_url":""},{"id":9997,"full_name":"pytest-dev/pytest","url":"https://github.com/pytest-dev/pytest","description":"The pytest framework makes it easy to write small tests, yet scales to support complex functional testing","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":["unit-testing","test","testing","python","hacktoberfest","unittest"],"license_spdx":"MIT","license_state":"standard","stars":14451,"forks":3330,"watchers":191,"monthly_downloads":1074251125,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-08-27T22:05:22.623206Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/pytest-dev/pytest?v=27055a4e-1","icon_source_type":"homepage","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":4993,"median":60,"p25":45,"p75":75},{"label":"100 – 999","repositories":2454,"median":77,"p25":57,"p75":88},{"label":"1,000 – 9,999","repositories":1899,"median":86,"p25":65,"p75":93},{"label":"10,000 and more","repositories":510,"median":94,"p25":86,"p75":97}],"popularity_downloads":[{"label":"Under 10K / month","repositories":2191,"median":63,"p25":53,"p75":78},{"label":"10K – 1M","repositories":1560,"median":77,"p25":62,"p75":89},{"label":"1M – 100M","repositories":1211,"median":78,"p25":53,"p75":92},{"label":"100M and more","repositories":91,"median":94,"p25":78,"p75":97}],"freshness":[{"label":"Pushed within 30 days","repositories":7240},{"label":"31 – 90 days","repositories":660},{"label":"91 – 365 days","repositories":863},{"label":"Over a year","repositories":1093}],"median_days_since_push":3,"dependencies":{"basis":7650,"median_direct":2,"median_indirect":21,"median_total":26,"buckets":[{"label":"0","repositories":589},{"label":"1 – 5","repositories":1305},{"label":"6 – 20","repositories":1646},{"label":"21 – 50","repositories":1092},{"label":"51 – 200","repositories":1433},{"label":"201 – 500","repositories":711},{"label":"501 – 1,000","repositories":391},{"label":"Over 1,000","repositories":483}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.1,"measured":9492,"inconclusive_share":0.0015},{"name":"Fuzzing","mean":0.5,"measured":9505,"inconclusive_share":0.0001},{"name":"Signed-Releases","mean":0.9,"measured":2915,"inconclusive_share":0.6934},{"name":"Branch-Protection","mean":1.4,"measured":6557,"inconclusive_share":0.3102},{"name":"Pinned-Dependencies","mean":1.6,"measured":8568,"inconclusive_share":0.0987},{"name":"SAST","mean":1.7,"measured":9497,"inconclusive_share":0.0009},{"name":"Token-Permissions","mean":1.9,"measured":8330,"inconclusive_share":0.1237},{"name":"Code-Review","mean":2.6,"measured":9464,"inconclusive_share":0.0044},{"name":"Security-Policy","mean":2.8,"measured":9506,"inconclusive_share":0.0},{"name":"Dependency-Update-Tool","mean":4.5,"measured":9506,"inconclusive_share":0.0},{"name":"Maintained","mean":5.8,"measured":9506,"inconclusive_share":0.0},{"name":"Vulnerabilities","mean":6.5,"measured":9503,"inconclusive_share":0.0003},{"name":"CI-Tests","mean":6.8,"measured":7706,"inconclusive_share":0.1894},{"name":"Contributors","mean":6.9,"measured":9506,"inconclusive_share":0.0},{"name":"License","mean":9.5,"measured":9506,"inconclusive_share":0.0},{"name":"Binary-Artifacts","mean":9.7,"measured":9504,"inconclusive_share":0.0002},{"name":"Dangerous-Workflow","mean":9.7,"measured":8330,"inconclusive_share":0.1237},{"name":"Packaging","mean":10.0,"measured":4372,"inconclusive_share":0.5401}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":848,"repositories":9857,"share":0.086,"share_of_record":0.086},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":145,"repositories":8995,"share":0.0161,"share_of_record":0.0147},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":4,"repositories":5353,"share":0.0007,"share_of_record":0.0004},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":1,"repositories":506,"share":0.002,"share_of_record":0.0001}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[92,661,719,501,571,616,989,1753,1939,2016]},{"key":"community","name":"Community & Adoption","bins":[75,397,665,1311,1500,1479,1566,1364,996,504]},{"key":"governance","name":"Sustainability & Governance","bins":[0,40,128,617,913,2439,2617,1810,1111,182]},{"key":"engineering","name":"Engineering Quality","bins":[6,26,154,353,533,969,1614,2212,2322,1668]},{"key":"security","name":"Security","bins":[92,91,632,1456,2187,2495,1710,919,240,35]},{"key":"ai_readiness","name":"AI Readiness","bins":[8,206,643,1236,1835,1923,1664,1166,902,274]}],"downloads_top1pct_share":0.7088}