{"ecosystem":"pypi","ecosystem_label":"PyPI","indexed_repositories":14036,"inspected_repositories":14035,"monthly_downloads":98190442489,"median_score":71,"share_good_or_better":0.6037,"computed_at":"2026-10-24T09:33:21.658121Z","bands":[{"band":"exceptional","repositories":1478,"monthly_downloads":37517130658},{"band":"excellent","repositories":3644,"monthly_downloads":30241805146},{"band":"good","repositories":3351,"monthly_downloads":12687258394},{"band":"moderate","repositories":2710,"monthly_downloads":8549486843},{"band":"weak","repositories":1123,"monthly_downloads":1874638496},{"band":"at_risk","repositories":1238,"monthly_downloads":5856421156},{"band":"critical","repositories":491,"monthly_downloads":1463701796}],"histogram":[{"start":0,"count":14},{"start":5,"count":32},{"start":10,"count":97},{"start":15,"count":348},{"start":20,"count":276},{"start":25,"count":370},{"start":30,"count":592},{"start":35,"count":334},{"start":40,"count":364},{"start":45,"count":425},{"start":50,"count":846},{"start":55,"count":850},{"start":60,"count":1014},{"start":65,"count":1180},{"start":70,"count":886},{"start":75,"count":1285},{"start":80,"count":1557},{"start":85,"count":1264},{"start":90,"count":1473},{"start":95,"count":828}],"categories":[{"key":"vitality","name":"Vitality","median":75,"record_median":68,"repositories":14036},{"key":"community","name":"Community & Adoption","median":54,"record_median":44,"repositories":14036},{"key":"governance","name":"Sustainability & Governance","median":60,"record_median":58,"repositories":14036},{"key":"engineering","name":"Engineering Quality","median":78,"record_median":66,"repositories":14036},{"key":"security","name":"Security","median":54,"record_median":49,"repositories":14036},{"key":"ai_readiness","name":"AI Readiness","median":60,"record_median":57,"repositories":14036}],"practices":[{"key":"readme","label":"README","share":0.9501,"repositories":14035},{"key":"license","label":"License detected","share":0.9597,"repositories":14035},{"key":"ci","label":"CI workflows","share":0.8997,"repositories":14035},{"key":"tests","label":"Automated tests","share":0.9401,"repositories":14035},{"key":"linter","label":"Linter configuration","share":0.7273,"repositories":14035},{"key":"docs_dir","label":"Documentation directory","share":0.6733,"repositories":14035},{"key":"contributing","label":"Contributing guide","share":0.4693,"repositories":14035},{"key":"security_policy","label":"Security policy","share":0.2437,"repositories":14035},{"key":"code_of_conduct","label":"Code of conduct","share":0.2573,"repositories":14035},{"key":"agent_instructions","label":"AI agent instructions","share":0.3112,"repositories":14035},{"key":"bootstrap","label":"One-command bootstrap","share":0.4834,"repositories":14035},{"key":"llms_txt","label":"llms.txt","share":0.1965,"repositories":14035}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":8225,"median_score":78},{"key":"user","label":"Personal accounts","repositories":5810,"median_score":62}],"bus_factor":[{"bucket":"1","repositories":10366},{"bucket":"2","repositories":2050},{"bucket":"3–5","repositories":1238},{"bucket":"6+","repositories":319}],"single_maintainer_share":0.7419,"single_maintainer_high_reliance":1299,"licenses":[{"license":"MIT","state":"standard","repositories":5709},{"license":"Apache-2.0","state":"standard","repositories":3446},{"license":null,"state":"custom","repositories":1707},{"license":"BSD-3-Clause","state":"standard","repositories":873},{"license":"GPL-3.0","state":"standard","repositories":607},{"license":null,"state":"absent","repositories":566},{"license":"AGPL-3.0","state":"standard","repositories":348},{"license":"BSD-2-Clause","state":"standard","repositories":186},{"license":"LGPL-3.0","state":"standard","repositories":141},{"license":"MPL-2.0","state":"standard","repositories":118}],"ecosystems":[],"top_repositories":[{"id":10007,"full_name":"urllib3/urllib3","url":"https://github.com/urllib3/urllib3","description":"urllib3 is a user-friendly HTTP client library for Python","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":["http","http-client","python","urllib3","filepost","httplib","https","pooling","ssl","threadsafe","urllib"],"license_spdx":"MIT","license_state":"standard","stars":4052,"forks":1538,"watchers":97,"monthly_downloads":1855397242,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-08-28T08:46:46.604968Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/urllib3/urllib3?v=5837a04d-1","icon_source_type":"tree","badge_url":""},{"id":10000,"full_name":"pypa/packaging","url":"https://github.com/pypa/packaging","description":"Core utilities for Python packages","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":[],"license_spdx":null,"license_state":"custom","stars":749,"forks":323,"watchers":26,"monthly_downloads":1765747097,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T08:14:40.890820Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/pypa/packaging?v=af1fb09b-1","icon_source_type":"avatar","badge_url":""},{"id":10009,"full_name":"kjd/idna","url":"https://github.com/kjd/idna","description":"Internationalized Domain Names for Python (IDNA 2008 and UTS #46)","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":["python","idna","dns","unicode"],"license_spdx":"BSD-3-Clause","license_state":"standard","stars":294,"forks":130,"watchers":11,"monthly_downloads":1454418571,"latest_score":86,"latest_band":"excellent","latest_scanned_at":"2026-09-16T08:17:18.408055Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/kjd/idna?v=751f9e67-1","icon_source_type":"avatar","badge_url":""},{"id":10002,"full_name":"python/typing_extensions","url":"https://github.com/python/typing_extensions","description":"Backported and experimental type hints for Python","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":["annotations","backport","checker","checking","function","hinting","hints","type","typechecking","typehinting","typehints","typing"],"license_spdx":null,"license_state":"custom","stars":590,"forks":152,"watchers":17,"monthly_downloads":1396475070,"latest_score":97,"latest_band":"exceptional","latest_scanned_at":"2026-10-23T07:02:27.829186Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/python/typing_extensions?v=8a5117d4-1","icon_source_type":"avatar","badge_url":""},{"id":9998,"full_name":"psf/requests","url":"https://github.com/psf/requests","description":"A simple, yet elegant, HTTP library.","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":["python","http","forhumans","requests","python-requests","client","humans","cookies"],"license_spdx":"Apache-2.0","license_state":"standard","stars":54305,"forks":10142,"watchers":1321,"monthly_downloads":1329902838,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T09:15:14.558146Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/psf/requests?v=6cac66b3-1","icon_source_type":"avatar","badge_url":""},{"id":10008,"full_name":"certifi/python-certifi","url":"https://github.com/certifi/python-certifi","description":"(Python Distribution) A carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":[],"license_spdx":null,"license_state":"custom","stars":1017,"forks":306,"watchers":42,"monthly_downloads":1286781208,"latest_score":84,"latest_band":"excellent","latest_scanned_at":"2026-10-23T07:03:20.959837Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/certifi/python-certifi?v=5af0f00d-1","icon_source_type":"avatar","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":7954,"median":63,"p25":50,"p75":77},{"label":"100 – 999","repositories":3329,"median":78,"p25":60,"p75":89},{"label":"1,000 – 9,999","repositories":2178,"median":86,"p25":67,"p75":93},{"label":"10,000 and more","repositories":574,"median":94,"p25":86,"p75":97}],"popularity_downloads":[{"label":"Under 10K / month","repositories":4700,"median":67,"p25":56,"p75":78},{"label":"10K – 1M","repositories":3003,"median":78,"p25":63,"p75":89},{"label":"1M – 100M","repositories":1863,"median":78,"p25":53,"p75":92},{"label":"100M and more","repositories":213,"median":88,"p25":74,"p75":95}],"freshness":[{"label":"Pushed within 30 days","repositories":10149},{"label":"31 – 90 days","repositories":1618},{"label":"91 – 365 days","repositories":1011},{"label":"Over a year","repositories":1257}],"median_days_since_push":3,"dependencies":{"basis":10541,"median_direct":3,"median_indirect":25,"median_total":30,"buckets":[{"label":"0","repositories":641},{"label":"1 – 5","repositories":1648},{"label":"6 – 20","repositories":2308},{"label":"21 – 50","repositories":1536},{"label":"51 – 200","repositories":2145},{"label":"201 – 500","repositories":1056},{"label":"501 – 1,000","repositories":585},{"label":"Over 1,000","repositories":622}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.1,"measured":13500,"inconclusive_share":0.0016},{"name":"Fuzzing","mean":0.5,"measured":13515,"inconclusive_share":0.0005},{"name":"Signed-Releases","mean":0.9,"measured":4336,"inconclusive_share":0.6793},{"name":"Branch-Protection","mean":1.5,"measured":9715,"inconclusive_share":0.2815},{"name":"Pinned-Dependencies","mean":1.8,"measured":12330,"inconclusive_share":0.0882},{"name":"SAST","mean":1.8,"measured":13488,"inconclusive_share":0.0025},{"name":"Token-Permissions","mean":2.2,"measured":12016,"inconclusive_share":0.1114},{"name":"Code-Review","mean":2.4,"measured":13469,"inconclusive_share":0.0039},{"name":"Security-Policy","mean":2.9,"measured":13522,"inconclusive_share":0.0},{"name":"Dependency-Update-Tool","mean":4.6,"measured":13522,"inconclusive_share":0.0},{"name":"Vulnerabilities","mean":6.3,"measured":13517,"inconclusive_share":0.0004},{"name":"Maintained","mean":6.4,"measured":13522,"inconclusive_share":0.0},{"name":"Contributors","mean":6.5,"measured":13522,"inconclusive_share":0.0},{"name":"CI-Tests","mean":7.1,"measured":10947,"inconclusive_share":0.1904},{"name":"License","mean":9.5,"measured":13521,"inconclusive_share":0.0001},{"name":"Binary-Artifacts","mean":9.7,"measured":13521,"inconclusive_share":0.0001},{"name":"Dangerous-Workflow","mean":9.7,"measured":12016,"inconclusive_share":0.1114},{"name":"Packaging","mean":10.0,"measured":6711,"inconclusive_share":0.5037}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":1299,"repositories":14036,"share":0.0925,"share_of_record":0.0926},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":212,"repositories":12670,"share":0.0167,"share_of_record":0.0151},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":6,"repositories":10120,"share":0.0006,"share_of_record":0.0004},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":3,"repositories":511,"share":0.0059,"share_of_record":0.0002}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[106,765,817,655,771,966,1425,2613,3092,2826]},{"key":"community","name":"Community & Adoption","bins":[93,507,949,2098,2408,2235,2125,1806,1245,570]},{"key":"governance","name":"Sustainability & Governance","bins":[0,53,180,939,1460,3991,3919,2279,1041,174]},{"key":"engineering","name":"Engineering Quality","bins":[8,37,187,395,659,1109,1894,3028,3909,2810]},{"key":"security","name":"Security","bins":[95,96,701,1605,2906,3758,2853,1525,437,60]},{"key":"ai_readiness","name":"AI Readiness","bins":[8,230,580,1352,2187,2641,2862,2064,1551,561]}],"downloads_top1pct_share":0.6564}