Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 2.5.0 · 2026-07-31 00:30 UTC

sebastienrousseau / bankstatementparser

Parse bank statements — CAMT/ISO 20022, PAIN.001, CSV (EN/DE/FR/ES), OFX/QFX, MT940, PDFs (digital + scanned) — into unified Transactions. Deterministic parsers, LLM/vision fallback, Golden Rule + multi-currency + continuity verification, page provenance, dedupe, review, accuracy evals, CLI + REST API. 100% test coverage.

PythonApache-2.0★ 38 Sterne⑂ 8 Forksseit Nov. 2023Auf GitHub ansehen ↗
ArtBibliothekNetzwerkdienstKommandozeilenwerkzeugwie das ermittelt wird
#banking#camt#finance#iso20022#pain001#bank-statements#cli#csv#mt940#ofx#parser#categorization#deduplication#litellm#llm#ollama#pdf#fintech#rest-api#treasury

sebastienrousseau/bankstatementparser erreicht einen Gesundheitsindex von 84 von 100 und liegt damit im Bereich Exzellent. Am stärksten schneidet es bei Engineering Quality (90/100) ab, am schwächsten bei Sustainability & Governance (54/100). Zuletzt vor 1 Tag aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

84
gesamt / 100
Exzellent

Software-Gesundheitsindex

Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.

84
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Exzellent80-92Durchgehend stark; geringfügige Lücken
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Der gewichtete Gesamtwert 71 wird auf der veröffentlichten Indexskala auf 84 kalibriert (Register-Kalibrierung 2026-08-02).

Eigentümerschaft

Sebastien RousseauPersönliches Konto
153 Follower146 öffentliche Reposseit Jan. 2012

Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlicht
PyPIbankstatementparser0.0.11-8vor 12 Tagen

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

79Gut · 21 % des Gesamtindex

Entwicklungsaktivität

72Gut
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 1 Tagen
7.6/36Commit-Rhythmus — 11/52 Wochen mit Commits
18/18Commit-Volumen — 154 Commits im letzten Jahr
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Verwendete Eingangsdaten
commits_last_year154
human_commit_share0,8
days_since_last_push1
active_weeks_last_year11

Release-Disziplin

90Exzellent
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 11 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 12 Tagen
27/27Release-Rhythmus — ein Release etwa alle 13,1 Tage
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Verwendete Eingangsdaten
releases_count11
latest_release_tagv0.0.11
releases_from_tagsnein
days_since_latest_release12
mean_days_between_releases13,1

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

58Mittel · 17 % des Gesamtindex

Popularität & Verbreitung

34Gefährdet
Wie die Bewertung erfolgt
25.4/60Stars — 38 Stars
7/25Forks — 8 Forks
1.7/15Watcher — 3 Watcher
Verwendete Eingangsdaten
forks8
stars38
watchers3
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community-Gesundheit

85Exzellent
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (Apache-2.0)
18/18CONTRIBUTING-Leitfaden
13.5/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
readme_badges—
has_contributingja
has_issue_templatenein
has_code_of_conductja
readme_badge_services—
has_pull_request_templatenein

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

54Mittel · 23 % des Gesamtindex

Maintainer-Resilienz (Bus-Faktor)

10Kritisch
Wie die Bewertung erfolgt
9/54Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
0/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 100 % der Commits
1.4/13.5Breite der Beitragenden — 1 Beitragende
0/10OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Verwendete Eingangsdaten
bus_factor1
contributors_sampled1
top_contributor_share1

Reaktionsfähigkeit bei Issues & PRs

59Mittel
Wie die Bewertung erfolgt
42/42Issue-Lösungsquote — 100 % der Issues geschlossen
9.1/30PR-Annahme — 41/135 entschiedene PRs gemergt
0/13Newcomer PR acceptance — kein PR eines Erstbeitragenden in 30 Tagen entschieden
0/15OpenSSF Scorecard: Code-Review — Found 0/6 approved changesets -- score normalized to 0
Verwendete Eingangsdaten
merged_prs41
open_issues0
closed_issues7
prs_merged_7d—
prs_decided_7d—
prs_merged_30d—
prs_decided_30d—
issue_closed_ratio1
closed_unmerged_prs94
first_time_authors_30d—
first_time_prs_merged_30d—
first_time_prs_decided_30d—
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): newcomer_pr_acceptance. Die verbleibenden Gewichte wurden renormalisiert.

Eigentümerschaft & Trägerschaft

63Mittel
Wie die Bewertung erfolgt
10/30Organisatorische Trägerschaft — persönliches (Nutzer-)Konto
0/20Verifizierte Domain — für Nutzerkonten nicht anwendbar
15.7/25Reichweite des Inhabers — 153 Follower von sebastienrousseau
25/25Kontohistorie — 146 öffentliche Repos, Kontoalter ca. 14 Jahre
Verwendete Eingangsdaten
followers153
owner_typeUser
is_verified—
owner_loginsebastienrousseau
public_repos146
account_age_days5.294
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.

Paketpflege

100Außergewöhnlich
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf pypi
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 12 Tagen
20/20Versionshistorie — 8 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesbankstatementparser
ecosystemspypi
any_deprecatednein
min_days_since_publish12

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

90Exzellent · 19 % des Gesamtindex

Engineering-Praktiken

84Exzellent
Wie die Bewertung erfolgt
24/24CI-Workflows — 6 Workflow(s)
24/24Tests vorhanden
16/16Linter-Konfiguration — .pylintrc
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfignein
has_linter_configja
has_precommit_confignein

Dokumentation

100Außergewöhnlich
Wie die Bewertung erfolgt
30/30README
25/25Dokumentationsverzeichnis
15/15Dokumentations-/Homepage-Site — http://docs.bankstatementparser.com/
10/10Repository-Beschreibung
10/10Topics — 20 Topics
10/10Wiki
Verwendete Eingangsdaten
topicsbanking, camt, finance, iso20022, pain001, bank-statements, cli, csv, mt940, ofx, parser, categorization, deduplication, litellm, llm, ollama, pdf, fintech, rest-api, treasury
has_wikija
homepagehttp://docs.bankstatementparser.com/
has_readmeja
has_docs_dirja
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

76Gut · 16 % des Gesamtindex

Sicherheitslage

70Gut
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
2.2/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/6 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Lizenz — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
4/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
5/5SAST — SAST tool is run on all commits
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
6.8/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated18
scorecard_versionv5.5.0
checks_inconclusive0
scorecard_aggregate7

Abhängigkeits-Advisories

100Außergewöhnlich
Wie die Bewertung erfolgt
35/35Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
25/25Indirekte Abhängigkeiten ohne bekannte Advisories — keine indirekte Abhängigkeit trägt ein bekanntes Advisory
0/40Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
sourceosv
advisories0
affected_packages0
assessed_packages13
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von pypi:bankstatementparser@0.0.11 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 13 Paketen. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.

61Mittel · 4 % des Gesamtindex

AI-Agentenkontext & Leitlinien

40Schwach
Wie die Bewertung erfolgt
0/45Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15Maschinenlesbare Doku (llms.txt)
40/40Lesbare Commit-Historie — 80 von 80 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share1
agent_instruction_files—
agent_instruction_max_bytes—

AI-Verify-Loop (Build / Test / Typprüfung)

87Exzellent
Wie die Bewertung erfolgt
18/18Bootstrap mit einem Befehl — Makefile, mise.toml
22/22Automatisierte Tests
11/11Lint-/Format-Konfiguration — .pylintrc
0/11Statische Typprüfung
10/10Reproduzierbare Umgebung — lockfile
10/10Belegte Agentenpraxis — 8 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
8/8Automatisierte Wartung — 20 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates
8/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfilespoetry.lock
has_dockerfilenein
typed_languagenein
bootstrap_filesMakefile, mise.toml
has_devcontainernein
has_linter_configja
typecheck_configs—
agent_commit_share0,08
toolchain_manifests—
dependency_bot_commit_share0,2

AI-Code-Lesbarkeit für Modelle

55Mittel
Wie die Bewertung erfolgt
0/45Typprüfbarer Code — Python ohne Typprüfungs-Konfiguration
55/55Handhabbare Dateigrößen — 0/107 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languagePython
largest_source_bytes52.634
source_files_sampled107
oversized_source_files0

Maschinenlesbare AI-Schnittstellen

40Schwach
Wie die Bewertung erfolgt
0/40API-Schema (OpenAPI/GraphQL/proto)
0/20MCP-Server
40/40Lauffähige Beispiele — examples
Verwendete Eingangsdaten
example_dirsexamples
has_mcp_signalnein
api_schema_files—

Eckdaten

38GitHub-Sterne
1Mitwirkende
154Commits, letzte 12 Monate
1Tage seit letztem Push
11Releases
1Bus-Faktor
0offene Issues
PyPIPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 8 ⇿
0Sterne
8Forks
10Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

02468812024-102025-092026-07
Major 0Minor 0Patch 10

Jeder Punkt umfasst 2 Tage.

OpenSSF Scorecard 7.0 / 10
7.0Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-31 00:30 UTC

10Binary-Artifactsno binaries found in the repo
3Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests25 out of 25 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/6 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
8Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 8
10SASTSAST tool is run on all commits
10Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
9Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Direkte Abhängigkeiten 16
RegistryPaketVersionsvorgabeManifest
PyPIlxml>=5.0pyproject.toml
PyPIopenpyxl^3.1.5pyproject.toml
PyPIpandas^2.3.3pyproject.toml
PyPIdefusedxml^0.7.1pyproject.toml
PyPIpydantic^2.11.0pyproject.toml
PyPIpolars^1.32.0pyproject.toml
PyPIlitellm>=1.83.10pyproject.toml
PyPIpypdf>=4.0.0pyproject.toml
PyPIpdfplumber>=0.11.0pyproject.toml
PyPIpypdfium2>=4.30.0pyproject.toml
PyPIfastapi>=0.115.0pyproject.toml
PyPIuvicorn>=0.34.0pyproject.toml
PyPIlxml>=4.9.3setup.cfg
PyPIopenpyxl>=3.1.2setup.cfg
PyPIpandas>=2.1.1setup.cfg
PyPIdefusedxml>=0.7.1setup.cfg
Alle Abhängigkeiten 121

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 12 direkte und 109 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
PyPIdefusedxml0.7.1direkt
PyPIfastapi0.139.2direkt
PyPIlitellm1.93.0direkt
PyPIlxml6.1.1direkt
PyPIopenpyxl3.1.5direkt
PyPIpandas2.3.3direkt
PyPIpdfplumber0.11.10direkt
PyPIpolars1.43.0direkt
PyPIpydantic2.13.4direkt
PyPIpypdf6.14.2direkt
PyPIpypdfium25.12.1direkt
PyPIuvicorn0.51.0direkt
PyPIaiohappyeyeballs2.6.2indirekt
PyPIaiohttp3.14.1indirekt
PyPIaiosignal1.4.0indirekt
PyPIannotated-doc0.0.4indirekt
PyPIannotated-types0.7.0indirekt
PyPIanyio4.13.0indirekt
PyPIast-serialize0.6.0indirekt
PyPIasync-timeout5.0.1indirekt
PyPIattrs26.1.0indirekt
PyPIbabel2.18.0indirekt
PyPIbackrefs7.0indirekt
PyPIbandit1.9.4indirekt
PyPIcertifi2026.5.20indirekt
PyPIcffi2.0.0indirekt
PyPIcharset-normalizer3.4.7indirekt
PyPIclick8.4.2indirekt
PyPIcolorama0.4.6indirekt
PyPIcoverage7.15.2indirekt
PyPIcryptography48.0.1indirekt
PyPIdistro1.9.0indirekt
PyPIet-xmlfile2.0.0indirekt
PyPIexceptiongroup1.3.1indirekt
PyPIfastuuid0.14.0indirekt
PyPIfilelock3.29.3indirekt
PyPIfrozenlist1.8.0indirekt
PyPIfsspec2026.4.0indirekt
PyPIghp-import2.1.0indirekt
PyPIgriffelib2.0.2indirekt
PyPIh110.16.0indirekt
PyPIhf-xet1.5.1indirekt
PyPIhttpcore1.0.9indirekt
PyPIhttpx0.28.1indirekt
PyPIhuggingface-hub1.18.0indirekt
PyPIhypothesis6.156.7indirekt
PyPIhypothesis6.158.1indirekt
PyPIidna3.18indirekt
PyPIimportlib-metadata8.9.0indirekt
PyPIiniconfig2.3.0indirekt
PyPIinterrogate1.7.0indirekt
PyPIjinja23.1.6indirekt
PyPIjiter0.15.0indirekt
PyPIjsonschema4.26.0indirekt
PyPIjsonschema-specifications2025.9.1indirekt
PyPIlibrt0.13.0indirekt
PyPImarkdown3.10.2indirekt
PyPImarkdown-it-py4.2.0indirekt
PyPImarkupsafe3.0.3indirekt
PyPImdurl0.1.2indirekt
PyPImergedeep1.3.4indirekt
PyPImkdocs1.6.1indirekt
PyPImkdocs-autorefs1.4.4indirekt
PyPImkdocs-get-deps0.2.2indirekt
PyPImkdocs-material9.7.7indirekt
PyPImkdocs-material-extensions1.3.1indirekt
PyPImkdocstrings1.0.6indirekt
PyPImkdocstrings-python2.0.4indirekt
PyPImultidict6.7.1indirekt
PyPImypy2.3.0indirekt
PyPImypy-extensions1.1.0indirekt
PyPInumpy2.2.6indirekt
PyPIopenai2.41.1indirekt
PyPIpackaging26.2indirekt
PyPIpaginate0.5.7indirekt
PyPIpathspec1.1.1indirekt
PyPIpdfminer-six20260107indirekt
PyPIpillow12.3.0indirekt
PyPIplatformdirs4.10.0indirekt
PyPIpluggy1.6.0indirekt
PyPIpolars-runtime-321.43.0indirekt
PyPIpropcache0.5.2indirekt
PyPIpy1.11.0indirekt
PyPIpy-cpuinfo9.0.0indirekt
PyPIpycparser3.0indirekt
PyPIpydantic-core2.46.4indirekt
PyPIpygments2.20.0indirekt
PyPIpymdown-extensions11.0indirekt
PyPIpytest9.1.1indirekt
PyPIpytest-benchmark5.2.3indirekt
PyPIpytest-cov7.1.0indirekt
PyPIpython-dateutil2.9.0.post0indirekt
PyPIpython-dotenv1.2.2indirekt
PyPIpytz2026.2indirekt
PyPIpyyaml6.0.3indirekt
PyPIpyyaml-env-tag1.1indirekt
PyPIreferencing0.37.0indirekt
PyPIregex2026.5.9indirekt
PyPIrequests2.34.2indirekt
PyPIrich15.0.0indirekt
PyPIrpds-py0.30.0indirekt
PyPIruff0.15.22indirekt
PyPIshellingham1.5.4indirekt
PyPIsix1.17.0indirekt
PyPIsniffio1.3.1indirekt
PyPIsortedcontainers2.4.0indirekt
PyPIstarlette1.3.1indirekt
PyPIstevedore5.8.0indirekt
PyPItabulate0.10.0indirekt
PyPItiktoken0.13.0indirekt
PyPItokenizers0.23.1indirekt
PyPItomli2.4.1indirekt
PyPItqdm4.68.2indirekt
PyPItyper0.25.1indirekt
PyPItyping-extensions4.16.0indirekt
PyPItyping-inspection0.4.2indirekt
PyPItzdata2026.3indirekt
PyPIurllib32.7.0indirekt
PyPIwatchdog6.0.0indirekt
PyPIyarl1.24.2indirekt
PyPIzipp4.1.0indirekt
Abhängigkeits-Advisories 0

Die Installation von pypi:bankstatementparser@0.0.11 zieht 13 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.

Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [
        "banking",
        "camt",
        "finance",
        "iso20022",
        "pain001",
        "bank-statements",
        "cli",
        "csv",
        "mt940",
        "ofx",
        "parser",
        "categorization",
        "deduplication",
        "litellm",
        "llm",
        "ollama",
        "pdf",
        "fintech",
        "rest-api",
        "treasury"
      ],
      "is_fork": false,
      "size_kb": 2159,
      "has_wiki": true,
      "homepage": "http://docs.bankstatementparser.com/",
      "languages": {
        "Shell": 1577,
        "Python": 997410,
        "Makefile": 3024
      },
      "pushed_at": "2026-07-29T02:36:26Z",
      "created_at": "2023-11-08T09:38:15Z",
      "owner_type": "User",
      "updated_at": "2026-07-29T11:42:10Z",
      "description": "Parse bank statements — CAMT/ISO 20022, PAIN.001, CSV (EN/DE/FR/ES), OFX/QFX, MT940, PDFs (digital + scanned) — into unified Transactions. Deterministic parsers, LLM/vision fallback, Golden Rule + multi-currency + continuity verification, page provenance, dedupe, review, accuracy evals, CLI + REST API. 100% test coverage.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Python",
      "significant_languages": [
        "Python"
      ]
    },
    "owner": {
      "blog": "https://sebastienrousseau.com",
      "name": "Sebastien Rousseau",
      "type": "User",
      "login": "sebastienrousseau",
      "company": null,
      "location": "London, UK",
      "followers": 153,
      "avatar_url": "https://avatars.githubusercontent.com/u/1394998?v=4",
      "created_at": "2012-01-31T16:10:59Z",
      "is_verified": null,
      "public_repos": 146,
      "account_age_days": 5294
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.0.11",
          "kind": "patch",
          "published_at": "2026-07-18T14:53:08Z"
        },
        {
          "tag": "v0.0.10",
          "kind": "patch",
          "published_at": "2026-06-25T15:42:33Z"
        },
        {
          "tag": "v0.0.9",
          "kind": "patch",
          "published_at": "2026-06-11T23:07:25Z"
        },
        {
          "tag": "v0.0.8",
          "kind": "patch",
          "published_at": "2026-04-11T17:43:49Z"
        },
        {
          "tag": "v0.0.7",
          "kind": "patch",
          "published_at": "2026-04-11T14:01:16Z"
        },
        {
          "tag": "v0.0.6",
          "kind": "patch",
          "published_at": "2026-04-10T23:15:06Z"
        },
        {
          "tag": "v0.0.5",
          "kind": "patch",
          "published_at": "2026-04-08T13:35:02Z"
        },
        {
          "tag": "v0.0.4",
          "kind": "patch",
          "published_at": "2026-04-01T07:40:10Z"
        },
        {
          "tag": "v0.0.3",
          "kind": "patch",
          "published_at": "2026-03-23T00:47:28Z"
        },
        {
          "tag": "v0.0.2",
          "kind": "patch",
          "published_at": "2026-03-22T21:14:57Z"
        },
        {
          "tag": "v0.0.1",
          "kind": "patch",
          "published_at": "2023-11-08T21:28:21Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "532d0255b8aca1166ee1ea2789b555cfe0c0f571",
          "body": "Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.0 to 4.37.3.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/comp\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump github/codeql-action/init from 4.37.0 to 4.37.3 (#128)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-28T19:46:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "57c2b4e358cd5127bc0a1461bc9c9a941940e2d8",
          "body": "Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action) from 4.37.0 to 4.37.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump github/codeql-action/autobuild from 4.37.0 to 4.37.2 (#130)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-28T19:46:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "063b04f966451ae4ef1dcf983bc4feb179d5b120",
          "body": "Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.0 to 4.37.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/c\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump github/codeql-action/analyze from 4.37.0 to 4.37.2 (#134)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-28T19:38:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2ffb5317968e27f7675c38a888ffd43f4a443e36",
          "body": "Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.21.3 to 11.0.\n- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)\n- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.21.3...11.0)\n\n---\nupdated-dependencies:\n- depe\n[…]\nns\n  dependency-version: '11.0'\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump pymdown-extensions from 10.21.3 to 11.0 (#142)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-25T08:52:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "27c8e8628406204294a8bc9a329157a9e7e3bb02",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb9\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/checkout from 7.0.0 to 7.0.1 (#129)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-25T08:19:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4299e9a2d2de713d4ea5ffdc39ca298bfb27b61f",
          "body": "Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.3.0 to 7.0.0.\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/setup-python from 6.3.0 to 7.0.0 (#132)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-25T08:18:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2a74c696b729a6952fefaf386339db9383e95a24",
          "body": "Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.14.0 to 1.14.1.\n- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)\n- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/cef221092ed1bacb1cc03d23a2d87d1d172e277b...ba38be9e\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#133)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-25T08:17:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "71a8bf68a27da0cf304edd4ca46fdaaed6ba3761",
          "body": "Bumps [tzdata](https://github.com/python/tzdata) from 2026.2 to 2026.3.\n- [Release notes](https://github.com/python/tzdata/releases)\n- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)\n- [Commits](https://github.com/python/tzdata/compare/2026.2...2026.3)\n\n---\nupdated-dependencies:\n- \n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump tzdata from 2026.2 to 2026.3 (#136)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-25T08:16:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "37aac0cb482dd4618c29bc62675679408a0ab483",
          "body": "Bumps [polars](https://github.com/pola-rs/polars) from 1.42.1 to 1.43.0.\n- [Release notes](https://github.com/pola-rs/polars/releases)\n- [Commits](https://github.com/pola-rs/polars/compare/py-1.42.1...py-1.43.0)\n\n---\nupdated-dependencies:\n- dependency-name: polars\n  dependency-version: 1.43.0\n  depe\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump polars from 1.42.1 to 1.43.0 (#141)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e6df988db892f9eaca64e6ff26f32cd57e5b260b",
          "body": "Bumps [click](https://github.com/pallets/click) from 8.4.1 to 8.4.2.\n- [Release notes](https://github.com/pallets/click/releases)\n- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)\n- [Commits](https://github.com/pallets/click/compare/8.4.1...8.4.2)\n\n---\nupdated-dependencies:\n- depe\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump click from 8.4.1 to 8.4.2 (#140)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "650b8b421116bfc6c37ce684b164aa226e210b89",
          "body": "Bumps [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings) from 1.0.4 to 1.0.6.\n- [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases)\n- [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/mkdocstrings/mkdocstrings\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump mkdocstrings from 1.0.4 to 1.0.6 (#139)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1785f0d044b8da717e85e9a5c18ccb219c1e8b9e",
          "body": "Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.49.0 to 0.51.0.\n- [Release notes](https://github.com/Kludex/uvicorn/releases)\n- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)\n- [Commits](https://github.com/Kludex/uvicorn/compare/0.49.0...0.51.0)\n\n---\nupdated\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump uvicorn from 0.49.0 to 0.51.0 (#138)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a6763170a7585abdb0770a80a7298a3d280d19a",
          "body": "Bumps [litellm](https://github.com/BerriAI/litellm) from 1.92.0 to 1.93.0.\n- [Release notes](https://github.com/BerriAI/litellm/releases)\n- [Commits](https://github.com/BerriAI/litellm/compare/v1.92.0...v1.93.0)\n\n---\nupdated-dependencies:\n- dependency-name: litellm\n  dependency-version: 1.93.0\n  dep\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump litellm from 1.92.0 to 1.93.0 (#137)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1812dea25870b39ac2a9693ceb3c9d6aa1182d6e",
          "body": "Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.7.6 to 9.7.7.\n- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)\n- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)\n- [Commits](https://github.com/squidfunk/mkdocs-materi\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump mkdocs-material from 9.7.6 to 9.7.7 (#135)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1c223f2bb8696b6b8f6d665dee521b253f689a8a",
          "body": "Bumps [hypothesis](https://github.com/HypothesisWorks/hypothesis) from 6.156.7 to 6.158.1.\n- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)\n- [Commits](https://github.com/HypothesisWorks/hypothesis/compare/v6.156.7...v6.158.1)\n\n---\nupdated-dependencies:\n- dependency-name: hy\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump hypothesis from 6.156.7 to 6.158.1 (#131)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "162f722a1f6d8919a1fce435ab3e6d59b0acc917",
          "body": "Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.2.0 to 12.3.0.\n- [Release notes](https://github.com/python-pillow/Pillow/releases)\n- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)\n- [Commits](https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0)\n[…]\now\n  dependency-version: 12.3.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump pillow from 12.2.0 to 12.3.0 (#127)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "22628fcd62cfc1f5d5d08e39f3da390432ab100e",
          "body": "Consolidate all 17 open Dependabot PRs into a single release.\n\nPython dependencies (poetry update + regenerated hash-pinned\nrequirements.txt): fastapi 0.139.2, litellm 1.92.0, polars 1.42.1,\npypdfium2 5.12.1, typing-extensions 4.16.0, ast-serialize 0.6.0,\ncoverage 7.15.2, hypothesis 6.156.7, mypy 2.\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "chore(deps): fold all open Dependabot updates into v0.0.11",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-07-18T14:45:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c3a315f7a1915a884c0871b31527047f4b56fc3a",
          "body": "…hing\n\nci: token-free PyPI trusted-publishing workflow",
          "is_bot": false,
          "headline": "Merge pull request #102 from sebastienrousseau/ci/pypi-trusted-publis…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T15:53:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5eaf91a55d7a2446952119f363f1f40d8a2f720c",
          "body": "Adds OIDC trusted publishing (no long-lived token) so releases can be\npublished to PyPI from CI, consistent with the companion packages.\nTriggers on workflow_dispatch (with a tag input) or when a GitHub\nrelease is published. Requires a PyPI trusted publisher configured for\nthe bankstatementparser pr\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "ci: add token-free PyPI trusted-publishing workflow",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T15:49:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a73b917703be0f80db1e2a7ebba095737a3705bc",
          "body": "chore(release): v0.0.10",
          "is_bot": false,
          "headline": "Merge pull request #101 from sebastienrousseau/release/v0.0.10",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T14:45:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61627c3173ebb6ab41c1e1e6519a46bc710b668c",
          "body": "… hardening\n\nFold the [Unreleased] changes into a dated [0.0.10] entry and bump the\nversion across pyproject, setup.cfg, the README badge, and the\n.github/SECURITY.md supported-versions table.\n\nRelease contents:\n- VerificationStatus.UNVERIFIABLE + clearer deterministic-detection\n  warning (#99)\n- Do\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "chore(release): v0.0.10 — UNVERIFIABLE status, warning rewrite, audit…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T14:41:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c51651d1be32d77854993b0ed9a9e2f0d42a268d",
          "body": "audit: genuine 100% docs + honest 100% coverage (de-pragma)",
          "is_bot": false,
          "headline": "Merge pull request #100 from sebastienrousseau/audit/full-review",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T13:58:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fdfee3248564ed32bdb057b70256b041947294d",
          "body": "…overage\n\nAdversarial audit against four criteria; all gates kept green.\n\nUnit tests (line+branch) genuinely 100%:\n- Removed 27 of 29 `# pragma: no cover` pragmas by making the guarded\n  behaviour testable and adding real tests: the `/ingest` REST endpoint\n  (400/413/200/422 branches), the API serve\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "test(audit): full-quality pass — 100% docs, pragma cleanup, example c…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T13:41:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "640a898f4799ddd88d0b0f3edf8d7c2f634168ea",
          "body": "…-and-warning\n\nfix(hybrid): add UNVERIFIABLE status + clearer deterministic-detection warning",
          "is_bot": false,
          "headline": "Merge pull request #99 from sebastienrousseau/fix/verification-status…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T10:41:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b94ba760b6338beca47347acbd17a87001cb45e3",
          "body": "Introduce VerificationStatus.UNVERIFIABLE for cases where the Golden\nRule cannot be applied (missing opening/closing balance, fewer than\ntwo statements, multi-currency balances that cannot be attributed to a\nsingle currency). Migrate every \"cannot apply the rule\" path that\npreviously reported FAILED\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "feat(hybrid): add UNVERIFIABLE status and reword detection warning",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T10:37:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a1c89c6c4acd8690b2bb1c62f32e17c23a4335a0",
          "body": "chore(deps): consolidated dependency updates + security fixes",
          "is_bot": false,
          "headline": "Merge pull request #98 from sebastienrousseau/chore/dependency-updates",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T22:06:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d756fd096c4adbc2312a42ada3038f1e34de8f0",
          "body": "Regenerate the lock to the latest compatible versions, covering the\nopen Dependabot PRs and resolving the open security alerts:\n\n- security: starlette 1.2.1 -> 1.3.1 (GHSA-82w8-qh3p-5jfq high,\n  GHSA-jp82-jpqv-5vv3 low) and pypdf 6.13.2 -> 6.14.2\n  (GHSA-jm82-fx9c-mx94 medium)\n- dev: mypy 1.20.2 -> \n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "chore(deps): consolidated dependency updates + security fixes",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T22:02:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "53cf4f2911da418a6b628530f1465cdef15af920",
          "body": "…ns/actions/cache-6.0.0\n\nci: bump actions/cache from 4.3.0 to 6.0.0",
          "is_bot": false,
          "headline": "Merge pull request #95 from sebastienrousseau/dependabot/github_actio…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T21:58:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc71f36b89bd13e2d356f115b2889233789ed12a",
          "body": "…ns/actions/checkout-7.0.0\n\nci: bump actions/checkout from 6.0.3 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #94 from sebastienrousseau/dependabot/github_actio…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T21:58:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02616213d9344bd4525de55e6fb8b999adf5077e",
          "body": "…ns/actions/deploy-pages-5.0.0\n\nci: bump actions/deploy-pages from 4.0.5 to 5.0.0",
          "is_bot": false,
          "headline": "Merge pull request #81 from sebastienrousseau/dependabot/github_actio…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T21:58:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "831bef880d623b8fbc44a2bf4a702c84d3e8efe4",
          "body": "…ns/actions/upload-pages-artifact-5.0.0\n\nci: bump actions/upload-pages-artifact from 3.0.1 to 5.0.0",
          "is_bot": false,
          "headline": "Merge pull request #82 from sebastienrousseau/dependabot/github_actio…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T21:58:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33dc36dbf3768d7c89887cdc70dc0e4472ce9ff2",
          "body": "docs(readme): add PyPI version badges to Ecosystem table",
          "is_bot": false,
          "headline": "Merge pull request #97 from sebastienrousseau/docs/ecosystem-pypi-badges",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T20:51:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e1b26c0bc1ab8521349c866e0767e39d7c6f320f",
          "body": "All five companion packages are now published on PyPI at v0.0.10; add a\nPyPI column with a live version badge linking to each project page.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "docs(readme): add PyPI version badges to the Ecosystem table",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T20:47:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "836c27d2421f5d97faad770af3c85cb12d1852f9",
          "body": "docs(readme): add Ecosystem section for companion packages",
          "is_bot": false,
          "headline": "Merge pull request #96 from sebastienrousseau/docs/companion-ecosystem",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T20:01:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b7f14ea80928513b6947c1c3632ec513ae104f2",
          "body": "Document the five standalone companion repositories that build on the\ncore engine: bankstatementparser-mcp (MCP server), -lsp (MT940 LSP),\n-writer-xlsx (Excel export), -loader-mt942 and -loader-bai2 (additional\ninput formats). Adds a Contents entry and a comparison table.\n\nCo-Authored-By: Claude Opu\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "docs(readme): add Ecosystem section for companion packages",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T19:02:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e339a96594c570623241902c95b3795c9aa82664",
          "body": "Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 6.0.0.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/0057852bfaa89a56745cba8c7296529d2fc3983\n[…]\ns:\n- dependency-name: actions/cache\n  dependency-version: 6.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/cache from 4.3.0 to 6.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-24T02:33:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "943563ee650242a62f94bf234ece24561c807239",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\n- dependency-name: actions/checkout\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/checkout from 6.0.3 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-24T02:33:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "259ed160b741045be9009759ffaa7a31a98b8889",
          "body": "Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 3.0.1 to 5.0.0.\n- [Release notes](https://github.com/actions/upload-pages-artifact/releases)\n- [Commits](https://github.com/actions/upload-pages-artifact/compare/56afc609e74202658d3ffba0e8f6dda462b719fa...fc\n[…]\nname: actions/upload-pages-artifact\n  dependency-version: 5.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/upload-pages-artifact from 3.0.1 to 5.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-17T02:33:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d110e37be3dd2566d399ade9f2389eec6dca8c3",
          "body": "Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4.0.5 to 5.0.0.\n- [Release notes](https://github.com/actions/deploy-pages/releases)\n- [Commits](https://github.com/actions/deploy-pages/compare/d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e...cd2ce8fcbc39b97be8ca5fce6e763baed58fa1\n[…]\npendency-name: actions/deploy-pages\n  dependency-version: 5.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/deploy-pages from 4.0.5 to 5.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-17T02:33:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1b54034225244f6b4a42510e3183364bf39f1b24",
          "body": "…egression suite, accuracy evals\n\nfeat(v0.0.9): audit pass, hybrid trust & correctness, regression suite, accuracy evals",
          "is_bot": false,
          "headline": "Merge PR #79: feat(v0.0.9) Audit Pass — hybrid trust & correctness, r…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T23:03:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f9388a1961d89266c6446435944c5a6c0f79ab6",
          "body": "All Unreleased entries (hybrid trust slice, regression suite,\nquick wins 5-8) ship in v0.0.9; section dated 2026-06-11.",
          "is_bot": false,
          "headline": "docs(changelog): fold Unreleased into 0.0.9 for release",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T22:57:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c4d996aed5c118fd8b126711b5f51c2c313c493",
          "body": "Plain \"bash\" on Windows runners resolves to the System32 WSL\nlauncher, which exits 1 when no distribution is installed. The\nregression tests now derive the Git Bash path from git.exe.\nAlso pin LF endings for *.sh via .gitattributes — runners check\nout with core.autocrlf=true, and CRLF breaks bash scripts.",
          "is_bot": false,
          "headline": "fix(ci): run shell-example tests under Git Bash on Windows",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T22:26:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01b71c5a75e66cb6f99a8ba7365471601bc29ae7",
          "body": "…ES headers, eval harness\n\n5. Page provenance in the text-LLM path: extract_text_pages()\n   keeps per-page text, smart_ingest attributes each row to the\n   page containing its description (Transaction.source_page;\n   vision rows inherit it from their bounding box). Surfaced in\n   the ingest CSV and \n[…]\nks on the mock self-check and\n   runs the real-model eval non-blocking, gated on the\n   BSP_EVAL_MODEL repo variable.\n\n818 tests, coverage gated at 100% line+branch; docs counts and\nCHANGELOG updated.",
          "is_bot": false,
          "headline": "feat(hybrid): quick wins 5-8 — page provenance, continuity check, FR/…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T21:45:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f84dd048e25c0066d2e794ec72fddb1e3b07408e",
          "body": "Restores pyproject.toml, setup.cfg, api.py, SECURITY.md and the\napi version test to 0.0.9. Version renumbering only happens on\nexplicit request.",
          "is_bot": false,
          "headline": "revert: keep version at 0.0.9 (0.1.0 bump was not requested)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T21:44:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28581f71e90baeb4752526c041fd47310cc8c791",
          "body": "Two new regression modules close the gap the docs-accuracy tests left\nopen (they checked claims, not behaviour):\n\n1. tests/test_regression_examples.py — every script under examples/\n   and examples/hybrid/ (plus both shell walkthroughs) runs as a real\n   subprocess against the repo fixtures; optiona\n[…]\numn\nnames as the CSV body. Fixed in cli.py with an in-process\nreal-fixture test (the existing tests mocked the stats shape).\n\n815 tests, coverage gate at 100%; README/FAQ counts and CHANGELOG\nupdated.",
          "is_bot": false,
          "headline": "test(regression): execute every example script and doc code block in CI",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T19:41:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eaedd9dd7e65edd008fc69cb2786cb15aa7105f6",
          "body": "…ing, reverify, multi-currency\n\nFour quick wins for existing users of the hybrid pipeline:\n\n1. Per-row provenance: SourceMethod gains the \"vision\" literal and\n   the vision path labels its rows \"vision\" instead of \"llm\"\n   (_build_result grows a source_method parameter).\n2. Confidence is acted on: n\n[…]\nfy_transactions (currency-aware dispatch) is exported from\n   bankstatementparser.hybrid and shared by orchestrator and CLI.\n\n746 tests, coverage gate at 100%; README/FAQ counts and CHANGELOG\nupdated.",
          "is_bot": false,
          "headline": "feat(hybrid): trust & correctness slice — provenance, confidence rout…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T18:54:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6dcd2dd3a15b013c41095a987fd18db8308a656",
          "body": "The export_csv/export_json cleanup tests hardcoded\n\"/tmp/test_bsp_output.*\": on windows-latest the simulated partial\n.tmp write failed with FileNotFoundError before the cleanup branch\n(base_parser.py:111/141) could run, leaving Windows coverage at\n99.89% against the 100% gate. Build the path from\ntempfile.gettempdir() instead, and do the same for the\ndirectory-rejection check in test_security.py.",
          "is_bot": false,
          "headline": "fix(test): use the platform temp dir so export-cleanup runs on Windows",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T17:21:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d23b93cb78e5fea15e8cd118f827acf0fa39447",
          "body": "The new windows-latest unit-test jobs surfaced three POSIX\nassumptions in the test suite:\n\n- chmod(0o000) does not revoke read access on Windows: the five\n  permission tests now mock os.access / builtins.open instead,\n  exercising the same parser and validator branches on every\n  platform (coverage \n[…]\nn NamedTemporaryFile\n  context fail with WinError 32: the nine affected tests now\n  close the handle before parsing, exporting, or unlinking\n\n696 tests pass locally with the 100% coverage gate intact.",
          "is_bot": false,
          "headline": "fix(test): make 16 tests Windows-compatible for the CI matrix",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T17:10:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "35fe6fb7d41c05df2743941eb4056ab4ae7e5a83",
          "body": "The unit-tests job's multi-line pytest command uses backslash\ncontinuations, but windows-latest executes run steps under\nPowerShell by default, which fails to parse them (ParserError:\n\"Missing expression after unary operator '--'\"). Set\n`shell: bash` on the step, matching the platform-parity job's\nexisting configuration.",
          "is_bot": false,
          "headline": "fix(ci): run unit-test step under bash on Windows runners",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T05:57:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7040ac257ccc515b9d105e56d6dd213871930e2a",
          "body": "Implements the 9-item v0.1.0 audit plan plus 100% coverage and\ndocumentation:\n\n- BREAKING: Pain001Parser.get_summary() raises on invalid ISO 20022\n  amounts instead of silently zeroing (shared _amounts.iso_decimal)\n- BREAKING: openpyxl moved to the new [excel] extra; core install no\n  longer pulls i\n[…]\nCAMT\n  recovery mode, and scanner failure_count; one justified pragma\n- README restyled to noyalib conventions (Contents TOC, dividers,\n  Documentation table); test-count and coverage claims re-synced",
          "is_bot": false,
          "headline": "feat(v0.1.0): API safety, 100% coverage gate, docs site, full CI matrix",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T00:41:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "492e4e468755ff41d6043c3f55be8468d747430c",
          "body": "…e gate, CLI dedupe\n\nCorrectness\n- Decimal end-to-end for all money fields; garbled or missing amounts\n  now raise instead of silently becoming 0.0 (new _amounts.py helpers)\n- Dedup keys are occurrence-counted (<hash>:<n>) and include\n  transaction_id/reference; fixed index-space bug in\n  Deduplicat\n[…]\n03 tests pass; ruff, mypy --strict, bandit all clean\n\nDocs\n- README/FAQ/CONTRIBUTING/compliance docs: \"100% branch coverage\" and\n  \"697 tests\" claims replaced with real figures (703 tests, 31 modules)",
          "is_bot": false,
          "headline": "feat(v0.0.9): audit remediation — Decimal correctness, honest coverag…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-10T21:40:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2a6f84b0639f5f46812a532f0a6bc3f7a101fb56",
          "body": "Bumps every live version reference in the repo to 0.0.9. Historical\nmarkers (README feature-row annotations like (v0.0.8), test docstrings\nthat document when each test landed, and the CHANGELOG history) are\ndeliberately preserved.\n\nChanged\n-------\n* pyproject.toml          version = \"0.0.9\"\n* setup.\n[…]\n.\n* bandit clean.\n* scripts/verify_locked_hashes.py 100 packages SHA-256 verified.\n* requirements.txt regenerated from poetry.lock (no content change\n  vs. previous commit; bytes-identical 915 lines).",
          "is_bot": false,
          "headline": "chore(v0.0.9): bump live version strings 0.0.8 -> 0.0.9",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-10T20:04:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11ab677fe8c9edb7cf6f8f225cfcd8920156c91d",
          "body": "…t bumps\n\nThree Critical findings from the v0.0.9 internal audit, six quick wins,\nall 20 open Dependabot version-bump PRs drained, and all 18 open\nDependabot security alerts resolved. 30 files: +3,185 / -5,009.\n\nCritical fixes\n--------------\n* C-1 REST API safety floor (api.py): chunked upload with\n\n[…]\nhashes.py: 100 packages SHA-256 verified\n  (down from 113 because dup-version entries dropped out).\n* pip install --dry-run --require-hashes -r requirements.txt clean\n  (regenerated from poetry.lock).",
          "is_bot": false,
          "headline": "feat(v0.0.9): audit pass — Critical fixes, security alerts, Dependabo…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-10T19:33:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5bdabd92de0c367f542848afd8f1e1ee2ae8ac4b",
          "body": "The v0.0.8 release shipped with updated counts and CHANGELOG but\nthe README content was missing for all five new features.\n\nKey Features table:\n  * 5 new rows: Multi-currency verification, hledger/beancount\n    export, Bulk directory scanner, Account mapping, REST API\n\nInstall section:\n  * Added [en\n[…]\nsage,\n    curl examples for /ingest and /health\n\nProject Layout:\n  * Added enrichment/, export/, api.py lines\n  * Updated descriptions to match v0.0.8 module inventory\n\n32/32 docs accuracy tests pass.",
          "is_bot": false,
          "headline": "docs: add v0.0.8 features to README",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T17:58:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b950a7622c9c167f06a79750646a9c0ed847d700",
          "body": "723 tests, 100% coverage. Multi-currency verification, ledger export, scanner, account mapper, REST API.",
          "is_bot": false,
          "headline": "Merge PR #52: feat(v0.0.8) Full Platform",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T17:38:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86ed5efee52a3dd180a7300abe76f39bcb3394aa",
          "body": "…or Python 3.14 compat",
          "is_bot": false,
          "headline": "fix(test): use asyncio.run() instead of deprecated get_event_loop() f…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T17:10:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00d584d6f09eee8364afa2ca31e15c19407b9caf",
          "body": "… account mapper, REST API\n\nFive new features closing every gap identified in the competitive\nanalysis against felgru/bank-statement-parser:\n\n1. Multi-currency balance verification\n   verify_balance_multi_currency() groups transactions by currency\n   and runs an independent Golden Rule check per gro\n[…]\n and GET /health. Gated behind\n   [api] extra. Default bind 127.0.0.1 (safe); use --host 0.0.0.0\n   for container deployments.\n\n723 tests at 100% coverage, mypy strict clean, ruff clean, bandit clean.",
          "is_bot": false,
          "headline": "feat(v0.0.8): full platform — multi-currency, ledger export, scanner,…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T17:05:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c86f30e542221d3e83d5440d24d97d63c988aba3",
          "body": "…inicpm-v, strip mode\n\n677 tests, 100% coverage. Closes the local vision 🔴→🟢 gap.",
          "is_bot": false,
          "headline": "Merge PR #51: feat(v0.0.7) Universal Vision — direct Ollama bridge, m…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T13:57:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9419be651bd2ec359e094413162ecab602215d3e",
          "body": "Line-by-line audit found two gaps in README.md:\n\n1. CLI section listed --type camt, pain001, ingest but NOT\n   --type review (added in v0.0.6). Added the review examples\n   and updated the \"Supports\" line.\n\n2. Key Features table had v0.0.5 rows but no v0.0.6 or v0.0.7\n   rows. Added 5 new entries: Categorization (v0.0.6),\n   Interactive review (v0.0.6), Bounding boxes (v0.0.6),\n   Direct Ollama bridge (v0.0.7), Strip mode (v0.0.7).",
          "is_bot": false,
          "headline": "docs: add --type review to CLI section + v0.0.6/v0.0.7 Key Features",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T13:52:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6787c90627906dff66b19dffd540320d52495f42",
          "body": "Post-rebase corrections caught by the docs accuracy test suite:\n  * README + FAQ: 644 tests -> 672 (v0.0.7 adds 28 ollama_direct\n    + strip-mode tests on top of v0.0.6's 644)\n  * README: 23 modules -> 24 (ollama_direct.py added)\n  * .github/SECURITY.md: 0.0.7 added to Supported Versions table",
          "is_bot": false,
          "headline": "docs: update counts + SECURITY.md for v0.0.7 post-rebase",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:53:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59bc348f5f1920a53f205278a83dff10db74610c",
          "body": "CodeQL flagged the previous assertion as\npy/incomplete-url-substring-sanitization (warning, high severity)\nbecause the rule looks for `url.startswith(prefix)` patterns used\nas sanitization checks for trusted-host validation.\n\nIn this test the startswith() was a verification that our code\ngenerates t\n[…]\ne test slightly stricter at the same time (the previous\nassertion would have passed for, e.g.,\n\"http://host.docker.internal.evil.com\" which is exactly the\nclass of bypass the CodeQL rule warns about).",
          "is_bot": false,
          "headline": "test: replace startswith() URL check with exact equality",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:35:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8771bd71ebdf81f2dc29a820d111e8280f8bce72",
          "body": "The quality-gates.yml workflow lists every test file explicitly\n(rather than `pytest tests/`), so newly added test files have to\nbe appended manually. Adding tests/test_hybrid_ollama_direct.py\nwhich lands the 21 new tests for the v0.0.7 direct Ollama bridge.\n\nWithout this entry, CI ran 569 - 21 = 54\n[…]\npytest discovers all\ntests/test_*.py files by default) but CI used the explicit list.\n\nSame fix pattern as the v0.0.5 commit b246e09 which originally\nadded all seven hybrid test files to the workflow.",
          "is_bot": false,
          "headline": "ci: collect test_hybrid_ollama_direct.py in unit-tests workflow",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:35:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bb44c53c8e17387f822d5e1ad1d09217d47ed105",
          "body": "CI runs `poetry install --with dev` without any extras, so httpx\n(which is a transitive dep of litellm in the [hybrid] extra and\ntherefore not in the dev environment) isn't importable on the\nsandbox. mypy on CI failed with:\n\n  bankstatementparser/hybrid/ollama_direct.py:92: error: Cannot\n  find impl\n[…]\nnimum install.\nThe hybrid module's runtime imports of httpx are wrapped in\ntry/except inside ollama_direct.py and raise a clear install\nhint at call time, so the no-extras path is genuinely supported.",
          "is_bot": false,
          "headline": "ci: add httpx to mypy ignore_missing_imports",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:35:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c85e74412743fb3908719dc9617f619401f21c84",
          "body": "Documentation refresh and version bump for v0.0.7 \"Universal\nVision\". Three independent improvements stacked on top of v0.0.6:\n\n  1. Direct Ollama bridge (committed in fea4a5e parent commits)\n     turns the LiteLLM long-prompt hang from 600 s into ~33 s\n  2. Recommended local vision model switched f\n[…]\nutomatically as of v0.0.7\"; the llava\n      hallucination row now points at minicpm-v as the local fix;\n      two new rows cover strip-mode year confabulation and\n      sign-flip on small local models",
          "is_bot": false,
          "headline": "docs(v0.0.7): minicpm-v default + smoke-test results + version bump",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:35:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e535653b59173c8859083c403373b764d25e5c77",
          "body": "Adds 6 new tests covering the strip_rows code path that landed in\nthe previous commit:\n\n  test_strip_extractor_calls_completion_per_strip\n      End-to-end happy path: 4 strips on a 1-page synthetic PDF,\n      header strip extracts balances + 1 transaction, body strips\n      extract transactions only\n[…]\nase64 image_url.\n\nAll tests use the same sys.modules monkeypatching pattern as the\nexisting single-shot vision tests, so the strip mode works in CI\nwithout pypdfium2 installed. Coverage stays at 100%.",
          "is_bot": false,
          "headline": "test(hybrid): strip-mode tests for VisionExtractor",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:31:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8dd67c69dfe081cea2f4d62d93c86f843fa2fdeb",
          "body": "Adds bankstatementparser/hybrid/ollama_direct.py — a small (~190\nline) drop-in replacement for litellm.completion that targets\nOllama's /api/chat endpoint via httpx. Designed to sidestep the\nupstream LiteLLM ↔ Ollama integration bug discovered during the\nv0.0.5 smoke test, where vision calls with lo\n[…]\nnal dependency is needed.\n\n21 new tests in test_hybrid_ollama_direct.py mock httpx via\nsys.modules; the entire bridge is exercised end-to-end without a\nrunning Ollama instance. Coverage stays at 100%.",
          "is_bot": false,
          "headline": "feat(hybrid): direct Ollama bridge bypasses LiteLLM long-prompt hang",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:31:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "23c738e55f432dcb6ee3d1ef09b770bcea8a08fc",
          "body": null,
          "is_bot": false,
          "headline": "chore: gitignore example-output/ (generated export artifacts)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T09:29:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c01f13becf9e8ee70df56e86e4902eab99d13413",
          "body": "Resolves GHSA-3crg-w4f6-42mx. Supersedes dependabot PR #50.\nLockfile-only change — pyproject.toml already allows >=4.0.0.",
          "is_bot": false,
          "headline": "chore(deps): bump pypdf 6.9.2 → 6.10.0",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T08:24:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86431e15b2a3ec667a3810ce6342fbeab5188e30",
          "body": "Full v0.0.6 milestone: Python 3.9 drop, categorization, review mode, bbox mapping, security hardening. 649 tests, 100% coverage.",
          "is_bot": false,
          "headline": "Merge PR #48: feat(v0.0.6) Intelligence Layer — closes #44 #45 #46 #47",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T23:04:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1a1ba52535cba9f17d24a6f63216185f5516f11",
          "body": "…lity\n\nThe CAMT streaming throughput test has failed twice on GitHub\nActions shared runners (9,825 and 9,914 TPS) while consistently\npassing locally (27,000+ TPS). The root cause is CPU throttling\non shared CI runners combined with pytest-cov instrumentation\noverhead, NOT a real performance regressi\n[…]\n an accidental synchronous I/O in the hot path) will fail\nthe test on every platform. The test name is updated from\ntest_camt_exceeds_10000_tps to test_camt_exceeds_8000_tps to\nmatch the new contract.",
          "is_bot": false,
          "headline": "fix(test): lower CAMT TPS threshold from 10,000 to 8,000 for CI stabi…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T22:16:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d033119783bf38f2110d452c019c5203644ebe2",
          "body": "New .githooks/pre-commit script that runs the same 4 gates CI\nenforces (ruff + mypy + pytest + bandit, ~80s on Apple Silicon)\nbefore every commit. If any gate fails, the commit is aborted.\n\nSetup: `make install-hooks` (or `git config core.hooksPath\n.githooks`). One-time per clone, idempotent, safe t\n[…]\nw includes `make install-hooks` in the clone\n    instructions\n  * New paragraph explaining the hook + how to skip on WIP\n\nREADME.md Local Development:\n  * Added `make install-hooks` to the setup block",
          "is_bot": false,
          "headline": "chore: add pre-commit hook running full `make verify` pipeline",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T21:32:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d72cd140a572fccacaed1b4e143e6cce87fd981b",
          "body": "New test_docs_accuracy.py with 32 tests across 8 categories that\nvalidate every factual claim in README, FAQ, CHANGELOG,\nCONTRIBUTING, SECURITY, and the example scripts against the\nactual codebase. If a doc gets stale, the test fails with a clear\nmessage telling the developer what to fix.\n\nCategorie\n[…]\nfunction counting) is 644.\npytest --collect-only shows 649 because benchmark fixtures\ngenerate multiple test items from a single def test_* function.\n\nCI workflow updated to include the new test file.",
          "is_bot": false,
          "headline": "test(docs): automated docs/README/examples accuracy validation",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T21:03:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1ec8fd9cb7c0c1c6fd2c5e130178d4eaad4b7f9",
          "body": "Addresses every real finding from the pre-merge security,\ncorrectness, and performance audit.\n\nSECURITY\n\n  S1 — Prompt injection defense in enrichment categorizer.\n  New _sanitize_for_prompt() strips ASCII control characters,\n  neutralizes common injection markers ([SYSTEM, [INST), and\n  removes bac\n[…]\n_injection_markers\n  * test_categorize_warns_on_duplicate_llm_index\n  * test_ingest_result_from_json_rejects_oversized_payload\n\n617 tests at 100% coverage, mypy strict clean, ruff clean,\nbandit clean.",
          "is_bot": false,
          "headline": "fix(security+correctness): deep-dive audit findings",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T19:35:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d8e298584aba62cb4eeb1cfa7d172b6c344c65c",
          "body": "Audit finding: four files had stale \"541 tests\" counts that should\nbe 612 (the feat/v0.0.6 branch added 71 tests for #44/#45/#46).\nREADME module count was \"21\" but the actual count is 23 (the new\nenrichment/ subpackage adds 2 files: __init__.py + categorizer.py).\n\nREADME.md\n  * \"541 tests\" -> \"612 t\n[…]\n#46, #47\"\n\nCross-referenced against actual counts:\n  pytest --collect-only   612 tests collected\n  find -name \"*.py\"       23 modules\n  ls examples/**          22 scripts (14 deterministic + 8 hybrid)",
          "is_bot": false,
          "headline": "docs: fix stale counts + expand v0.0.6 CHANGELOG to full milestone",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T19:05:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "700824737eafec742512c7da1aabd435b05c36da",
          "body": "The previous commit added the [enrichment] extra to pyproject.toml\n(litellm only) without regenerating the lockfile. CI fails with\n\"pyproject.toml changed significantly since poetry.lock was last\ngenerated\" — same pattern as the v0.0.5 lockfile refresh.",
          "is_bot": false,
          "headline": "chore(deps): refresh poetry.lock for [enrichment] extra",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T17:59:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66433e5a20a81105d564800718e45496f8143811",
          "body": "Adds tests/test_enrichment_categorizer.py and\ntests/test_hybrid_review_cli.py to the quality-gates.yml explicit\ntest file list. Without this, CI runs 612 - 52 = 560 tests and\nmisses the new modules' coverage.",
          "is_bot": false,
          "headline": "ci: collect enrichment + review CLI tests in workflow",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T17:51:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc355a6d059a91c73793dd27e346967392b77e3b",
          "body": "…ound-trip\n\nCloses #45.\n\nIngestResult JSON serialization:\n  * New to_json() instance method produces a stable JSON string\n    with schema_version=1, Decimal amounts as strings (no float\n    drift), ISO-formatted dates, VerificationStatus enum values,\n    and an audit_trail array.\n  * New from_json()\n[…]\ntus,\ncorrupt-JSON, explicit-output-path, bbox+raw rendering,\nEOF-as-quit, missing-extra, dispatch-via-run,\nconfidence-absent).\n\n612 tests at 100% line + branch coverage, mypy strict clean,\nruff clean.",
          "is_bot": false,
          "headline": "feat(cli): interactive --type review subcommand + IngestResult JSON r…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T17:50:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8a697cbb8f4a3d73ae8f8582482a7d35dd832a7a",
          "body": "Closes #44.\n\nNew bankstatementparser.enrichment subpackage behind the\n[enrichment] install extra (just litellm — no additional deps).\n\n  Categorizer            LiteLLM-backed transaction categorizer\n                         with pluggable schema and batch support\n  EnrichedTransaction    Wrapper (no\n[…]\ne boundaries, case\nnormalization, unknown categories, missing/optional fields,\nmissing-row handling, graceful failure on LLM errors, JSON\nparsing (fenced, prose-wrapped, invalid), and prompt building.",
          "is_bot": false,
          "headline": "feat(enrichment): categorization module with pluggable schema",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T17:50:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "719571710dee848175493b523bb7e1014d858062",
          "body": "Closes #46.\n\nNew BoundingBox Pydantic model in transaction_models.py with\nnormalized (0.0-1.0) coordinates, page_index, and frozen config.\nNew Transaction.source_bbox: Optional[BoundingBox] field populated\nby the vision path when the multimodal model returns spatial\ncoordinates (always None for dete\n[…]\nw tests in test_hybrid_llm_extractor.py covering: bbox\npresent, bbox with explicit page_index, bbox omitted, bbox\nexplicitly null, non-object bbox, missing required keys, and\nout-of-range coordinates.",
          "is_bot": false,
          "headline": "feat(model): BoundingBox + Transaction.source_bbox + vision bbox prompts",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T17:50:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6399c814b407bb3b48933f58162ca8bfb2ca3022",
          "body": "P2 polishing items from the v0.0.6 audit that touch source files\nrather than docs:\n\n  bankstatementparser/hybrid/orchestrator.py\n    * Module docstring expanded from a one-line summary to a\n      structured Sphinx-style description of the three-path\n      routing (Path A deterministic, Path B text-L\n[…]\nPython floor changes, classifiers, and version\nbumps. The setup.* files only need to be touched when one of\nthose changes affects pip-21.3-or-older compatibility (which\nis essentially never in 2026+).",
          "is_bot": false,
          "headline": "docs(code): orchestrator docstring + legacy setup mirror annotations",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T16:43:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "db7f5e0e2a02d8bc900c09f73d722456af71e6b5",
          "body": "Implements all P1 and P2 items from the v0.0.6 documentation audit.\n\nP1 — Missing context\n\n  CONTRIBUTING.md\n    * New \"Optional extras for hybrid pipeline work\" subsection\n      listing [hybrid], [hybrid-plus], and [hybrid-vision] with\n      one-line guidance per extra\n    * `make verify` recommend\n[…]\nCross-platform matrix in examples/hybrid/README.md updated\n      to reflect that native Windows is now fully covered\n\n  examples/README.md\n    * Hybrid section gains the .ps1 row alongside the .sh row",
          "is_bot": false,
          "headline": "docs: P1 + P2 audit fixes for v0.0.6",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T16:41:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "55afee2ac76bf957e4e9d3e4955ae4bb2d2704c0",
          "body": "The previous Makefile used `python3 setup.py sdist bdist_wheel` and\n`twine upload`, which contradicted the actual v0.0.5 release flow\n(`poetry build` + `poetry publish`) and pointed at drifting setup.py\nmetadata. Anyone running `make release` would have produced an\nartifact from the legacy parallel \n[…]\n.md's\n    signed-commits policy\n  * Pushes the branch and the tag separately so a failed publish\n    leaves the tag visible upstream for retry\n\nResolves the P0 alignment finding from the v0.0.6 audit.",
          "is_bot": false,
          "headline": "chore!: modernise Makefile for Poetry-based build + release flow",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T16:40:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "755105c84d0c0924f291a995351ba52ff88f9327",
          "body": "CHANGELOG.md\n  * New v0.0.6 section with Removed / Security / Changed / Fixed /\n    Migration notes subsections\n  * Security table mapping each transitive package to its v0.0.5\n    -> v0.0.6 version bump and the GHSAs that close as a result\n  * Migration note explicitly tells Python 3.9 holdouts to \n[…]\n v=0.0.6\n  * Requirements line \"Python **3.9** through **3.14**\" -> \"Python\n    **3.10** through **3.14** (Python 3.9 was dropped in v0.0.6 —\n    pin to v0.0.5 if you cannot upgrade your interpreter)\"",
          "is_bot": false,
          "headline": "docs: v0.0.6 changelog entry + README Python floor update",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T16:00:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fea4a5e984500d82c1f83e30cc5ddce5dc04b120",
          "body": "BREAKING CHANGE: minimum supported Python is now 3.10. Users on\nPython 3.9 must stay on v0.0.5 or upgrade their interpreter. The\npublic API is unchanged.\n\nCloses #47.\n\nPython 3.9 reached end-of-life on 2025-10-31. v0.0.5 shipped with\nnine transitive CVEs allow-listed in security.yml because the\npatc\n[…]\ner/, tests/, examples/\n  * bandit clean\n  * All hybrid examples (01 deterministic, 02 text-LLM mock,\n    03 vision mock, 04 golden rule, 05 dedupe) still run\n    end-to-end with the new dependency set",
          "is_bot": false,
          "headline": "feat!: drop Python 3.9 support, clear transitive CVE allow-list",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T15:57:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c67f5076eb60c6ee0ab9fb2800e40910c7b135a4",
          "body": "… vision fallback\n\nRelease v0.0.5 — Universal Extraction. 13 commits, 541 tests, 100% coverage. See CHANGELOG.md for the full breakdown.",
          "is_bot": false,
          "headline": "Merge PR #43: feat(v0.0.5) hybrid deterministic + LLM extraction with…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T13:11:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b512cd70d2aba8520ce7e0d3ca9e8fe2350aa5de",
          "body": "Three pre-release polish items consolidated into one commit so the\nv0.0.5 tag has a clean tip:\n\n1. Console-script entry point\n   * New `bankstatementparser.cli.main()` wrapper\n   * `[tool.poetry.scripts]` block in pyproject.toml mapping the\n     `bankstatementparser` command to `cli:main`\n   * Both \n[…]\ns\n\nVerified: 541 tests at 100% coverage, mypy strict clean, ruff\nclean, bandit clean. The console-script smoke test against the\nCAMT.053 fixture returns the expected DataFrame with all v0.0.5\ncolumns.",
          "is_bot": false,
          "headline": "docs: pre-release polish — console script, README, CHANGELOG",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T13:05:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e497ebd6bdc81df4be82b8d2bdc66c930abb2894",
          "body": "Ran every example end-to-end against local Ollama models on Apple\nSilicon (llama3 4.7 GB, llava 4.7 GB) to validate the library code\nwith the real LLM stack.\n\nFindings:\n\n  Path A (deterministic)   PERFECT — CAMT.053 fixture, 3 tx, all\n                           hashes correct\n  Path B (text-LLM)    \n[…]\nn its\nprocessing time. The default 2.0x is correct for hosted models\nwhich is what we now recommend in the inline comment.\n\nTest suite: still 540 tests at 100% coverage, ruff clean, mypy\nstrict clean.",
          "is_bot": false,
          "headline": "docs(examples): record smoke-test results against real Ollama models",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T12:30:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "86470870f8b2fee4da8468433005e99dd535d30d",
          "body": "Bandit B101 flagged the three `assert` statements in the example as\nunsafe because asserts are stripped under `python -O`. Replaced\nthem with an `_expect()` helper that raises SystemExit on contract\nviolation. Example output is unchanged in the happy path, but the\nfailure mode is now stable under all Python optimisation levels —\nwhich is the right behaviour for a script that doubles as a model\nfor downstream users to copy.",
          "is_bot": false,
          "headline": "ci: replace asserts with explicit raises in 04_golden_rule example",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T09:46:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec7b5828481efccf39a712fa789f1b4d6153ea98",
          "body": "Adds end-to-end runnable demonstrations of every v0.0.5 hybrid code\npath under examples/hybrid/. Real bank PDFs cannot be redistributed\n(PII + copyright), so the suite ships a `generate_sample_pdfs.py`\nscript that produces two reproducible synthetic UK-bank statements:\n\n  digital.pdf   text-layer PD\n[…]\nstrict\nclean, ruff clean, all five Python examples run end-to-end against\nthe live library (text-LLM and vision examples in MOCK mode), CLI\ningest subcommand smoke-tested against the CAMT.053 fixture.",
          "is_bot": false,
          "headline": "docs(examples): add hybrid pipeline walkthrough with synthetic PDFs",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T09:38:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a75f63588010be6575d2c1b65a0bec4ea67868c5",
          "body": "GHSA-gc5v-m9x4-r6x2 — insecure temp file reuse in\nrequests.utils.extract_zipped_paths(). Reachable only if a caller\nexplicitly invokes that helper to extract a zipped path bundle,\nwhich we never do — our only use of requests is through litellm's\nHTTP client. Patched in 2.33.0 which requires Python >\n[…]\n If a sixth surfaces,\nthe strategic fix is to scope the [hybrid] extras to Python >=\n3.10 rather than continuing to allow-list each transitive issue\nindividually. Python 3.9 reached EOL on 2025-10-31.",
          "is_bot": false,
          "headline": "ci: allow-list requests temp-file CVE (3.9 only)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:44:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a00518ff163fe3a5f65ea72d79a6ba2b4b564873",
          "body": "GHSA-w853-jp5j-5j7f and GHSA-qmgc-5h2g-mvrw — both TOCTOU symlink\nraces during lock acquisition, requiring an attacker with write\naccess to the user's lockfile parent directory. For a local CLI\nbank-statement parser, an attacker at that privilege level can read\nthe source statements directly; the fi\n[…]\n.3, both require Python >= 3.10.\nFilelock on Python 3.10+ already resolves to 3.25.2 (clean); the\nvulnerable 3.19.1 is locked only for the narrow `python_version\n== \"3.9\" and extra == \"hybrid\"` slice.",
          "is_bot": false,
          "headline": "ci: allow-list filelock TOCTOU CVEs (3.9 + hybrid only)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:38:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e396fca6eeef7eb6cd9f85d30397a0369aec8b06",
          "body": "GHSA-cfh3-3jmp-rvhc — out-of-bounds write loading PSD images,\npatched in pillow 12.1.1 which requires Python >= 3.10. Pillow on\nPython 3.10+ already resolves to 12.2.0 (clean); the vulnerable\n11.3.0 is locked only for the very narrow\n`python_version == \"3.9\" and extra == \"hybrid-plus\"` slice.\n\nThe PSD decoder is reachable only if a caller hands a Photoshop\nfile to Pillow — our PDF rendering path only emits and reads PNG,\nso the vulnerable code is not on any execution path we ship.",
          "is_bot": false,
          "headline": "ci: allow-list pillow PSD decoder CVE (3.9 + hybrid-plus only)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:32:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6e7417f7e3f5b19b0d9c5b7bccb37c98d47e1ce",
          "body": "GHSA-m959-cc7f-wv43 (incomplete DNS name constraint enforcement on\nX.509 peer names) was the third cryptography@43.0.3 advisory not\ncaught by the previous allow-list pass. Same scope justification as\nthe other two: we never use cryptography to validate X.509 certs\nfor peer authentication, so the vulnerable code path is unreachable\nfrom anything we ship. Patched in 46.0.6, blocked by the same\nPython > 3.9.1 floor as the rest of the cryptography series.",
          "is_bot": false,
          "headline": "ci: add third cryptography advisory to allow-list",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:27:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a75fce3b66fbac5b54e5c52293f660b2d6cad107",
          "body": "Two more advisories surfaced after the litellm allow-list landed,\nboth on cryptography@43.0.3 which litellm pulls in transitively:\n\n  GHSA-r6ph-v2qm-q3c2  SECT curve subgroup attack (high)\n  GHSA-79v4-65xg-pq4g  OpenSSL bundled in older wheels (low)\n\nNeither is reachable from our import surface — we\n[…]\n1, while bankstatementparser still supports Python\n3.9.0/3.9.1, so Poetry cannot bump them across the matrix. Same\n\"revisit when minimum Python is raised\" reminder as the litellm\nallow-list documents.",
          "is_bot": false,
          "headline": "ci: allow-list cryptography proxy CVEs (transitive via litellm)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:24:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b246e0937eee6ccb4ac4da7251b2bc90dce040ad",
          "body": "Three CI fixes required after the initial v0.0.5 push:\n\n1. Unit-test workflow explicitly listed every test file by name and\n   never picked up the seven new hybrid test files, which dropped\n   coverage to 83%. Added all tests/test_hybrid_*.py to the list.\n\n2. Bandit flagged `except Exception: contin\n[…]\non `dependency-review-action` with a documented \"revisit when the\n   minimum Python is raised\" comment.\n\nLocally verified: 540 tests pass at 100% coverage, mypy strict clean,\nruff clean, bandit clean.",
          "is_bot": false,
          "headline": "ci: collect hybrid tests, narrow bandit catch, allow litellm proxy CVEs",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:17:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1c70d5b1d801237e27b54fcad86c58eff8be417a",
          "body": "Regenerates the lock file to match pyproject.toml after adding the\n[hybrid], [hybrid-plus], and [hybrid-vision] extras. Fixes CI failures\nwhere every job exited with:\n\n    pyproject.toml changed significantly since poetry.lock was last\n    generated. Run `poetry lock` to fix the lock file.\n\nAlso pic\n[…]\n\nsuperseding PRs #41 and #42:\n\n  * ruff    0.15.8 -> 0.15.9\n  * tzdata  2023.3 -> 2026.1\n\nVerified locally: ruff 0.15.9 lint clean, mypy strict clean, 540 tests\npassing with 100% line+branch coverage.",
          "is_bot": false,
          "headline": "chore(deps): refresh poetry.lock for v0.0.5 extras",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T07:56:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3b2fc17a462a5e014ffcce7e9bbba9cdc1ecca7",
          "body": "Release v0.0.5 \"Universal Extraction\". Combines the deterministic\nreliability of the ISO/exchange-format parsers with an adaptive\nLLM layer for unstandardized PDFs, including a multimodal vision\nfallback for scanned/image-only statements.\n\nArchitecture — three extraction paths via `smart_ingest()`:\n\n[…]\nmypy strict clean. All optional\ndependencies (litellm, pypdf, pypdfium2) are monkeypatched via\n`sys.modules` or completion-function injection, so CI does not\nrequire any of the extras to be installed.",
          "is_bot": false,
          "headline": "feat(hybrid): add deterministic+LLM pipeline with vision fallback",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T07:22:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "80a6454578619a818b5f12c77da378a6ee8322bd",
          "body": "Sweep-only change across 14 files. No functional modifications.\nFiles that also receive feature changes in v0.0.5 (cli, model,\ndeduplicator, input_validator) carry their updated headers alongside\nthose changes in the follow-up commit.",
          "is_bot": false,
          "headline": "chore: update copyright headers to 2023-2026 Bank Statement Parser",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T07:21:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "342363e5c554c72011e1d4a0537f32085fa2c967",
          "body": "---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "fix: bust GitHub badge cache for PyPI Python versions",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-01T14:29:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f00eb80ced2734b255488ee3346a23d3b474195",
          "body": "deps: bump ruff to 0.15.8 and codeql-action to 4.35.1",
          "is_bot": false,
          "headline": "deps: bump ruff to 0.15.8 and codeql-action to 4.35.1",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-01T13:55:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 11,
      "commits_last_year": 154,
      "latest_release_at": "2026-07-18T14:53:08Z",
      "latest_release_tag": "v0.0.11",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 11,
      "days_since_latest_release": 12,
      "mean_days_between_releases": 13.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 85,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "bankstatementparser",
          "exists": true,
          "license": "Apache Software License",
          "keywords": [
            "License :: Other/Proprietary License",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.10",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.13",
            "Programming Language :: Python :: 3.14"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/bankstatementparser/",
          "is_deprecated": false,
          "latest_version": "0.0.11",
          "repository_url": "https://github.com/sebastienrousseau/bankstatementparser",
          "versions_count": 8,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2023-11-08T21:26:11.541122Z",
          "latest_published_at": "2026-07-18T14:53:37.152696Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 12
        }
      ]
    },
    "popularity": {
      "forks": 8,
      "stars": 38,
      "watchers": 3,
      "fork_history": {
        "days": [
          {
            "date": "2024-10-12",
            "count": 1
          },
          {
            "date": "2025-09-19",
            "count": 1
          },
          {
            "date": "2026-04-27",
            "count": 1
          },
          {
            "date": "2026-04-29",
            "count": 1
          },
          {
            "date": "2026-06-01",
            "count": 1
          },
          {
            "date": "2026-06-10",
            "count": 1
          },
          {
            "date": "2026-07-18",
            "count": 1
          },
          {
            "date": "2026-07-26",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 8,
        "total_forks": 8
      },
      "star_history": null,
      "open_issues_and_prs": 9
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile",
        "mise.toml"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 52634,
      "source_files_sampled": 107,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "pyproject.toml",
        "requirements.txt",
        "setup.cfg"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 13,
        "malicious_count": 0,
        "assessed_package": "pypi:bankstatementparser@0.0.11",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "pypi"
      ],
      "dependencies": [
        {
          "name": "lxml",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=5.0"
        },
        {
          "name": "openpyxl",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "^3.1.5"
        },
        {
          "name": "pandas",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "^2.3.3"
        },
        {
          "name": "defusedxml",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "^0.7.1"
        },
        {
          "name": "pydantic",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "^2.11.0"
        },
        {
          "name": "polars",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "^1.32.0"
        },
        {
          "name": "litellm",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.83.10"
        },
        {
          "name": "pypdf",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=4.0.0"
        },
        {
          "name": "pdfplumber",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.11.0"
        },
        {
          "name": "pypdfium2",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=4.30.0"
        },
        {
          "name": "fastapi",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.115.0"
        },
        {
          "name": "uvicorn",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.34.0"
        },
        {
          "name": "lxml",
          "manifest": "setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">=4.9.3"
        },
        {
          "name": "openpyxl",
          "manifest": "setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">=3.1.2"
        },
        {
          "name": "pandas",
          "manifest": "setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">=2.1.1"
        },
        {
          "name": "defusedxml",
          "manifest": "setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">=0.7.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "defusedxml",
            "direct": true,
            "version": "0.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "fastapi",
            "direct": true,
            "version": "0.139.2",
            "ecosystem": "pypi"
          },
          {
            "name": "litellm",
            "direct": true,
            "version": "1.93.0",
            "ecosystem": "pypi"
          },
          {
            "name": "lxml",
            "direct": true,
            "version": "6.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "openpyxl",
            "direct": true,
            "version": "3.1.5",
            "ecosystem": "pypi"
          },
          {
            "name": "pandas",
            "direct": true,
            "version": "2.3.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pdfplumber",
            "direct": true,
            "version": "0.11.10",
            "ecosystem": "pypi"
          },
          {
            "name": "polars",
            "direct": true,
            "version": "1.43.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic",
            "direct": true,
            "version": "2.13.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pypdf",
            "direct": true,
            "version": "6.14.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pypdfium2",
            "direct": true,
            "version": "5.12.1",
            "ecosystem": "pypi"
          },
          {
            "name": "uvicorn",
            "direct": true,
            "version": "0.51.0",
            "ecosystem": "pypi"
          },
          {
            "name": "aiohappyeyeballs",
            "direct": false,
            "version": "2.6.2",
            "ecosystem": "pypi"
          },
          {
            "name": "aiohttp",
            "direct": false,
            "version": "3.14.1",
            "ecosystem": "pypi"
          },
          {
            "name": "aiosignal",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "annotated-doc",
            "direct": false,
            "version": "0.0.4",
            "ecosystem": "pypi"
          },
          {
            "name": "annotated-types",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "anyio",
            "direct": false,
            "version": "4.13.0",
            "ecosystem": "pypi"
          },
          {
            "name": "ast-serialize",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "async-timeout",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "attrs",
            "direct": false,
            "version": "26.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "babel",
            "direct": false,
            "version": "2.18.0",
            "ecosystem": "pypi"
          },
          {
            "name": "backrefs",
            "direct": false,
            "version": "7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "bandit",
            "direct": false,
            "version": "1.9.4",
            "ecosystem": "pypi"
          },
          {
            "name": "certifi",
            "direct": false,
            "version": "2026.5.20",
            "ecosystem": "pypi"
          },
          {
            "name": "cffi",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "charset-normalizer",
            "direct": false,
            "version": "3.4.7",
            "ecosystem": "pypi"
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.4.2",
            "ecosystem": "pypi"
          },
          {
            "name": "colorama",
            "direct": false,
            "version": "0.4.6",
            "ecosystem": "pypi"
          },
          {
            "name": "coverage",
            "direct": false,
            "version": "7.15.2",
            "ecosystem": "pypi"
          },
          {
            "name": "cryptography",
            "direct": false,
            "version": "48.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "distro",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "et-xmlfile",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "exceptiongroup",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "fastuuid",
            "direct": false,
            "version": "0.14.0",
            "ecosystem": "pypi"
          },
          {
            "name": "filelock",
            "direct": false,
            "version": "3.29.3",
            "ecosystem": "pypi"
          },
          {
            "name": "frozenlist",
            "direct": false,
            "version": "1.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "fsspec",
            "direct": false,
            "version": "2026.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "ghp-import",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "griffelib",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "pypi"
          },
          {
            "name": "h11",
            "direct": false,
            "version": "0.16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "hf-xet",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "httpcore",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "pypi"
          },
          {
            "name": "httpx",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "pypi"
          },
          {
            "name": "huggingface-hub",
            "direct": false,
            "version": "1.18.0",
            "ecosystem": "pypi"
          },
          {
            "name": "hypothesis",
            "direct": false,
            "version": "6.156.7",
            "ecosystem": "pypi"
          },
          {
            "name": "hypothesis",
            "direct": false,
            "version": "6.158.1",
            "ecosystem": "pypi"
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.18",
            "ecosystem": "pypi"
          },
          {
            "name": "importlib-metadata",
            "direct": false,
            "version": "8.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "iniconfig",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "interrogate",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jinja2",
            "direct": false,
            "version": "3.1.6",
            "ecosystem": "pypi"
          },
          {
            "name": "jiter",
            "direct": false,
            "version": "0.15.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema",
            "direct": false,
            "version": "4.26.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema-specifications",
            "direct": false,
            "version": "2025.9.1",
            "ecosystem": "pypi"
          },
          {
            "name": "librt",
            "direct": false,
            "version": "0.13.0",
            "ecosystem": "pypi"
          },
          {
            "name": "markdown",
            "direct": false,
            "version": "3.10.2",
            "ecosystem": "pypi"
          },
          {
            "name": "markdown-it-py",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "markupsafe",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "mdurl",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "mergedeep",
            "direct": false,
            "version": "1.3.4",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs",
            "direct": false,
            "version": "1.6.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-autorefs",
            "direct": false,
            "version": "1.4.4",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-get-deps",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-material",
            "direct": false,
            "version": "9.7.7",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-material-extensions",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocstrings",
            "direct": false,
            "version": "1.0.6",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocstrings-python",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "pypi"
          },
          {
            "name": "multidict",
            "direct": false,
            "version": "6.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mypy",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "mypy-extensions",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "numpy",
            "direct": false,
            "version": "2.2.6",
            "ecosystem": "pypi"
          },
          {
            "name": "openai",
            "direct": false,
            "version": "2.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "packaging",
            "direct": false,
            "version": "26.2",
            "ecosystem": "pypi"
          },
          {
            "name": "paginate",
            "direct": false,
            "version": "0.5.7",
            "ecosystem": "pypi"
          },
          {
            "name": "pathspec",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pdfminer-six",
            "direct": false,
            "version": "20260107",
            "ecosystem": "pypi"
          },
          {
            "name": "pillow",
            "direct": false,
            "version": "12.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "platformdirs",
            "direct": false,
            "version": "4.10.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pluggy",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "polars-runtime-32",
            "direct": false,
            "version": "1.43.0",
            "ecosystem": "pypi"
          },
          {
            "name": "propcache",
            "direct": false,
            "version": "0.5.2",
            "ecosystem": "pypi"
          },
          {
            "name": "py",
            "direct": false,
            "version": "1.11.0",
            "ecosystem": "pypi"
          },
          {
            "name": "py-cpuinfo",
            "direct": false,
            "version": "9.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pycparser",
            "direct": false,
            "version": "3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic-core",
            "direct": false,
            "version": "2.46.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pygments",
            "direct": false,
            "version": "2.20.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pymdown-extensions",
            "direct": false,
            "version": "11.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest",
            "direct": false,
            "version": "9.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-benchmark",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-cov",
            "direct": false,
            "version": "7.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-dateutil",
            "direct": false,
            "version": "2.9.0.post0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-dotenv",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pytz",
            "direct": false,
            "version": "2026.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml-env-tag",
            "direct": false,
            "version": "1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "referencing",
            "direct": false,
            "version": "0.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "regex",
            "direct": false,
            "version": "2026.5.9",
            "ecosystem": "pypi"
          },
          {
            "name": "requests",
            "direct": false,
            "version": "2.34.2",
            "ecosystem": "pypi"
          },
          {
            "name": "rich",
            "direct": false,
            "version": "15.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "rpds-py",
            "direct": false,
            "version": "0.30.0",
            "ecosystem": "pypi"
          },
          {
            "name": "ruff",
            "direct": false,
            "version": "0.15.22",
            "ecosystem": "pypi"
          },
          {
            "name": "shellingham",
            "direct": false,
            "version": "1.5.4",
            "ecosystem": "pypi"
          },
          {
            "name": "six",
            "direct": false,
            "version": "1.17.0",
            "ecosystem": "pypi"
          },
          {
            "name": "sniffio",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "sortedcontainers",
            "direct": false,
            "version": "2.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "starlette",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "stevedore",
            "direct": false,
            "version": "5.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "tabulate",
            "direct": false,
            "version": "0.10.0",
            "ecosystem": "pypi"
          },
          {
            "name": "tiktoken",
            "direct": false,
            "version": "0.13.0",
            "ecosystem": "pypi"
          },
          {
            "name": "tokenizers",
            "direct": false,
            "version": "0.23.1",
            "ecosystem": "pypi"
          },
          {
            "name": "tomli",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "pypi"
          },
          {
            "name": "tqdm",
            "direct": false,
            "version": "4.68.2",
            "ecosystem": "pypi"
          },
          {
            "name": "typer",
            "direct": false,
            "version": "0.25.1",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-extensions",
            "direct": false,
            "version": "4.16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-inspection",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "pypi"
          },
          {
            "name": "tzdata",
            "direct": false,
            "version": "2026.3",
            "ecosystem": "pypi"
          },
          {
            "name": "urllib3",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "watchdog",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "yarl",
            "direct": false,
            "version": "1.24.2",
            "ecosystem": "pypi"
          },
          {
            "name": "zipp",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 121,
        "direct_count": 12,
        "indirect_count": 109
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 9,
        "merged_prs": 41,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 7,
        "closed_unmerged_prs": 94
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "sebastienrousseau",
          "commits": 141,
          "avatar_url": "https://avatars.githubusercontent.com/u/1394998?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "commit-signature-verification.yml",
        "docs.yml",
        "pypi-publish.yml",
        "quality-gates.yml",
        "release-integrity.yml",
        "security.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".pylintrc"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "poetry.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/6 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 8,
            "reason": "dependency not pinned by hash detected -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 9,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "532d0255b8aca1166ee1ea2789b555cfe0c0f571",
        "ran_at": "2026-07-31T00:30:37Z",
        "aggregate_score": 7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-29T02:33:51Z",
      "oldest_open_prs": [
        {
          "number": 143,
          "created_at": "2026-07-29T02:33:36Z",
          "last_comment_at": "2026-07-29T02:33:37Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 144,
          "created_at": "2026-07-29T02:33:43Z",
          "last_comment_at": "2026-07-29T02:33:44Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 145,
          "created_at": "2026-07-29T02:33:48Z",
          "last_comment_at": "2026-07-29T02:33:49Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 146,
          "created_at": "2026-07-29T02:33:53Z",
          "last_comment_at": "2026-07-29T02:33:54Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 147,
          "created_at": "2026-07-29T02:33:59Z",
          "last_comment_at": "2026-07-29T02:33:59Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 148,
          "created_at": "2026-07-29T02:34:30Z",
          "last_comment_at": "2026-07-29T02:34:31Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 149,
          "created_at": "2026-07-29T02:35:14Z",
          "last_comment_at": "2026-07-29T02:35:15Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 150,
          "created_at": "2026-07-29T02:35:54Z",
          "last_comment_at": "2026-07-29T02:35:55Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 151,
          "created_at": "2026-07-29T02:36:27Z",
          "last_comment_at": "2026-07-29T02:36:28Z",
          "last_comment_author": "dependabot"
        }
      ],
      "last_merged_pr_at": "2026-07-28T19:46:53Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/sebastienrousseau/bankstatementparser",
    "host": "github.com",
    "name": "bankstatementparser",
    "owner": "sebastienrousseau"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "excellent",
      "name": "Overall health",
      "note": "The weighted overall 71 is calibrated to 84 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 71,
            "calibrated": 84,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 84,
      "inputs": {
        "security": 76,
        "vitality": 79,
        "community": 58,
        "governance": 54,
        "calibration": "2026-08-02",
        "engineering": 90,
        "ai_readiness": 61,
        "weighted_overall_raw": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 79,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "commits_last_year": 154,
              "human_commit_share": 0.8,
              "days_since_last_push": 1,
              "active_weeks_last_year": 11
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "11/52 weeks with commits",
                "points": 7.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 11
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "154 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 154
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 11,
              "latest_release_tag": "v0.0.11",
              "releases_from_tags": false,
              "days_since_latest_release": 12,
              "mean_days_between_releases": 13.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "11 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 12 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 12
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~13.1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 13.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 17,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 17 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 17
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 58,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 34,
            "inputs": {
              "forks": 8,
              "stars": 38,
              "watchers": 3,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "38 stars",
                "points": 25.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 38
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "8 forks",
                "points": 7,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "3 watchers",
                "points": 1.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 59,
            "inputs": {
              "merged_prs": 41,
              "open_issues": 0,
              "closed_issues": 7,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 94,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 42,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "41/135 decided PRs merged",
                "points": 9.1,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 41,
                      "decided": 135
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/6 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 63,
            "inputs": {
              "followers": 153,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "sebastienrousseau",
              "public_repos": 146,
              "account_age_days": 5294
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "153 followers of sebastienrousseau",
                "points": 15.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 153,
                      "login": "sebastienrousseau"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "146 public repos, account ~14 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 146
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 14
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "bankstatementparser"
              ],
              "ecosystems": "pypi",
              "any_deprecated": false,
              "min_days_since_publish": 12
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 12 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 12
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "8 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 90,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "6 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".pylintrc",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".pylintrc"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "exceptional",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "banking",
                "camt",
                "finance",
                "iso20022",
                "pain001",
                "bank-statements",
                "cli",
                "csv",
                "mt940",
                "ofx",
                "parser",
                "categorization",
                "deduplication",
                "litellm",
                "llm",
                "ollama",
                "pdf",
                "fintech",
                "rest-api",
                "treasury"
              ],
              "has_wiki": true,
              "homepage": "http://docs.bankstatementparser.com/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "http://docs.bankstatementparser.com/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "20 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 76,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/6 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:bankstatementparser@0.0.11 runtime dependency closure — what installing the published package pulls in — 13 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "pypi:bankstatementparser@0.0.11",
                  "assessed": 13
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 13,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 13,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 61,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "weak",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "80 of 80 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 80,
                      "sampled": 80
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 87,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "poetry.lock"
              ],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [
                "Makefile",
                "mise.toml"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.08,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.2
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile, mise.toml",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile, mise.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".pylintrc",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".pylintrc"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "8 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 8,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "20 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 20,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 52634,
              "source_files_sampled": 107,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/107 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 107,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "weak",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "top": [
        "library",
        "application"
      ],
      "labels": [
        "library",
        "network-service",
        "cli"
      ],
      "scores": {
        "cli": 4,
        "library": 6,
        "network-service": 4
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:pypi",
          "weight": 6
        },
        {
          "tier": "dependencies",
          "label": "network-service",
          "source": "dep:fastapi",
          "weight": 4
        },
        {
          "tier": "description",
          "label": "cli",
          "source": "description:cli",
          "weight": 2
        },
        {
          "tier": "tags",
          "label": "cli",
          "source": "tag:cli",
          "weight": 2
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": true,
      "consumed_by_code": true
    },
    "metrics_version": "2.5.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-31T00:30:52.739703Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sebastienrousseau/bankstatementparser.svg",
  "full_name": "sebastienrousseau/bankstatementparser",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Verwandte Einträge

Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit sebastienrousseau/bankstatementparser teilen. Nebeneinander lesen →

100deepset-ai/haystackOpen-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modular pipelines and agent workflows with explicit control over retrieval, routing, memory, and generation. Built for scalable agents, RAG, multimodal applications, semantic search, and conversational systems.Außergewöhnlich100ray-project/rayRay is an AI compute engine. Ray consists of a core distributed runtime and a set of AI Libraries for accelerating ML workloads.Außergewöhnlich100run-llama/llama_indexLlamaIndex is the leading document agent and OCR platformAußergewöhnlich99apache/supersetApache Superset is a Data Visualization and Data Exploration PlatformAußergewöhnlich99scalar/scalarScalar is an open-source API platform:　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　🌐 Modern REST API Client　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　📖 Beautiful API References　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　✨ 1st-Class OpenAPI/Swagger SupportAußergewöhnlich98google/adk-pythonAn open-source, code-first Python toolkit for building, evaluating, and deploying sophisticated AI agents with flexibility and control.Außergewöhnlich

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.5.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — PyPI.