sebastienrousseau/bankstatementparser tiene un índice de salud de 84 sobre 100, lo que lo sitúa en la banda Excelente. Su puntuación más alta es Engineering Quality (90/100) y la más baja, Sustainability & Governance (54/100). Se actualizó por última vez hace 1 día. Una sola persona concentra la mayor parte del trabajo reciente.
84
global / 100
Excelente
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala estandarizada de 1 a 100. El resultado global parte de su media ponderada, calibrada contra la distribución del registro público para que las bandas tengan significado percentil; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe un límite «En riesgo» de 34.
84
Excepcional93-100El nivel más alto del registro (≈ el 5% superior); cumple prácticamente todos los criterios evaluados
Excelente80-92Sólido en todos los frentes; carencias menores
Bueno65-79Saludable; carencias limitadas y manejables
Moderado50-64Aceptable con carencias notables; se recomienda revisión
Débil35-49Debilidades sustanciales en varias áreas
En riesgo20-34Debilidades significativas; su adopción exige cautela
Crítico1-19Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
El resultado global ponderado 71 se calibra a 84 en la escala publicada del índice (calibración del registro 2026-08-02).
153 seguidores146 repositorios públicosdesde ene 2012
Este repositorio pertenece a una cuenta personal. Un proyecto con un único propietario conlleva más riesgo de continuidad que uno respaldado por una organización.
Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido
25/25
Dependencias indirectas libres de avisos conocidos — ninguna dependencia indirecta tiene un aviso conocido
0/40
Sin avisos pendientes — ningún aviso tiene fecha de publicación
Datos de entrada utilizados
source
osv
advisories
0
affected_packages
0
assessed_packages
13
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluidos de la puntuación (sin datos o no aplicable): Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejó el cierre de dependencias en tiempo de ejecución de pypi:bankstatementparser@0.0.11 —lo que arrastra la instalación del paquete publicado—: 13 paquetes. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Tiene un peso deliberadamente pequeño (4%): las herramientas para agentes son una señal real de mantenimiento, pero un repositorio sin ninguna puede alcanzar igualmente 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Más detalle
Historial de estrellas y forks 0 ★ / 8 ⇿
0Estrellas
8Forks
10Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 0Menor 0Parche 10
Cada punto abarca 2 días.
OpenSSF Scorecard 7.0 / 10
7.0agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-31 00:30 UTC
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 12 paquetes directos y 109 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
Registro
Paquete
Versión
Relación
PyPI
defusedxml
0.7.1
directa
PyPI
fastapi
0.139.2
directa
PyPI
litellm
1.93.0
directa
PyPI
lxml
6.1.1
directa
PyPI
openpyxl
3.1.5
directa
PyPI
pandas
2.3.3
directa
PyPI
pdfplumber
0.11.10
directa
PyPI
polars
1.43.0
directa
PyPI
pydantic
2.13.4
directa
PyPI
pypdf
6.14.2
directa
PyPI
pypdfium2
5.12.1
directa
PyPI
uvicorn
0.51.0
directa
PyPI
aiohappyeyeballs
2.6.2
indirecta
PyPI
aiohttp
3.14.1
indirecta
PyPI
aiosignal
1.4.0
indirecta
PyPI
annotated-doc
0.0.4
indirecta
PyPI
annotated-types
0.7.0
indirecta
PyPI
anyio
4.13.0
indirecta
PyPI
ast-serialize
0.6.0
indirecta
PyPI
async-timeout
5.0.1
indirecta
PyPI
attrs
26.1.0
indirecta
PyPI
babel
2.18.0
indirecta
PyPI
backrefs
7.0
indirecta
PyPI
bandit
1.9.4
indirecta
PyPI
certifi
2026.5.20
indirecta
PyPI
cffi
2.0.0
indirecta
PyPI
charset-normalizer
3.4.7
indirecta
PyPI
click
8.4.2
indirecta
PyPI
colorama
0.4.6
indirecta
PyPI
coverage
7.15.2
indirecta
PyPI
cryptography
48.0.1
indirecta
PyPI
distro
1.9.0
indirecta
PyPI
et-xmlfile
2.0.0
indirecta
PyPI
exceptiongroup
1.3.1
indirecta
PyPI
fastuuid
0.14.0
indirecta
PyPI
filelock
3.29.3
indirecta
PyPI
frozenlist
1.8.0
indirecta
PyPI
fsspec
2026.4.0
indirecta
PyPI
ghp-import
2.1.0
indirecta
PyPI
griffelib
2.0.2
indirecta
PyPI
h11
0.16.0
indirecta
PyPI
hf-xet
1.5.1
indirecta
PyPI
httpcore
1.0.9
indirecta
PyPI
httpx
0.28.1
indirecta
PyPI
huggingface-hub
1.18.0
indirecta
PyPI
hypothesis
6.156.7
indirecta
PyPI
hypothesis
6.158.1
indirecta
PyPI
idna
3.18
indirecta
PyPI
importlib-metadata
8.9.0
indirecta
PyPI
iniconfig
2.3.0
indirecta
PyPI
interrogate
1.7.0
indirecta
PyPI
jinja2
3.1.6
indirecta
PyPI
jiter
0.15.0
indirecta
PyPI
jsonschema
4.26.0
indirecta
PyPI
jsonschema-specifications
2025.9.1
indirecta
PyPI
librt
0.13.0
indirecta
PyPI
markdown
3.10.2
indirecta
PyPI
markdown-it-py
4.2.0
indirecta
PyPI
markupsafe
3.0.3
indirecta
PyPI
mdurl
0.1.2
indirecta
PyPI
mergedeep
1.3.4
indirecta
PyPI
mkdocs
1.6.1
indirecta
PyPI
mkdocs-autorefs
1.4.4
indirecta
PyPI
mkdocs-get-deps
0.2.2
indirecta
PyPI
mkdocs-material
9.7.7
indirecta
PyPI
mkdocs-material-extensions
1.3.1
indirecta
PyPI
mkdocstrings
1.0.6
indirecta
PyPI
mkdocstrings-python
2.0.4
indirecta
PyPI
multidict
6.7.1
indirecta
PyPI
mypy
2.3.0
indirecta
PyPI
mypy-extensions
1.1.0
indirecta
PyPI
numpy
2.2.6
indirecta
PyPI
openai
2.41.1
indirecta
PyPI
packaging
26.2
indirecta
PyPI
paginate
0.5.7
indirecta
PyPI
pathspec
1.1.1
indirecta
PyPI
pdfminer-six
20260107
indirecta
PyPI
pillow
12.3.0
indirecta
PyPI
platformdirs
4.10.0
indirecta
PyPI
pluggy
1.6.0
indirecta
PyPI
polars-runtime-32
1.43.0
indirecta
PyPI
propcache
0.5.2
indirecta
PyPI
py
1.11.0
indirecta
PyPI
py-cpuinfo
9.0.0
indirecta
PyPI
pycparser
3.0
indirecta
PyPI
pydantic-core
2.46.4
indirecta
PyPI
pygments
2.20.0
indirecta
PyPI
pymdown-extensions
11.0
indirecta
PyPI
pytest
9.1.1
indirecta
PyPI
pytest-benchmark
5.2.3
indirecta
PyPI
pytest-cov
7.1.0
indirecta
PyPI
python-dateutil
2.9.0.post0
indirecta
PyPI
python-dotenv
1.2.2
indirecta
PyPI
pytz
2026.2
indirecta
PyPI
pyyaml
6.0.3
indirecta
PyPI
pyyaml-env-tag
1.1
indirecta
PyPI
referencing
0.37.0
indirecta
PyPI
regex
2026.5.9
indirecta
PyPI
requests
2.34.2
indirecta
PyPI
rich
15.0.0
indirecta
PyPI
rpds-py
0.30.0
indirecta
PyPI
ruff
0.15.22
indirecta
PyPI
shellingham
1.5.4
indirecta
PyPI
six
1.17.0
indirecta
PyPI
sniffio
1.3.1
indirecta
PyPI
sortedcontainers
2.4.0
indirecta
PyPI
starlette
1.3.1
indirecta
PyPI
stevedore
5.8.0
indirecta
PyPI
tabulate
0.10.0
indirecta
PyPI
tiktoken
0.13.0
indirecta
PyPI
tokenizers
0.23.1
indirecta
PyPI
tomli
2.4.1
indirecta
PyPI
tqdm
4.68.2
indirecta
PyPI
typer
0.25.1
indirecta
PyPI
typing-extensions
4.16.0
indirecta
PyPI
typing-inspection
0.4.2
indirecta
PyPI
tzdata
2026.3
indirecta
PyPI
urllib3
2.7.0
indirecta
PyPI
watchdog
6.0.0
indirecta
PyPI
yarl
1.24.2
indirecta
PyPI
zipp
4.1.0
indirecta
Avisos de dependencias 0
Instalar pypi:bankstatementparser@0.0.11 arrastra 13 paquetes, directos y transitivos: 0 tienen avisos conocidos, de los cuales 0 son dependencias directas.
Ningún aviso conocido afecta a las dependencias evaluadas.
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"banking",
"camt",
"finance",
"iso20022",
"pain001",
"bank-statements",
"cli",
"csv",
"mt940",
"ofx",
"parser",
"categorization",
"deduplication",
"litellm",
"llm",
"ollama",
"pdf",
"fintech",
"rest-api",
"treasury"
],
"is_fork": false,
"size_kb": 2159,
"has_wiki": true,
"homepage": "http://docs.bankstatementparser.com/",
"languages": {
"Shell": 1577,
"Python": 997410,
"Makefile": 3024
},
"pushed_at": "2026-07-29T02:36:26Z",
"created_at": "2023-11-08T09:38:15Z",
"owner_type": "User",
"updated_at": "2026-07-29T11:42:10Z",
"description": "Parse bank statements — CAMT/ISO 20022, PAIN.001, CSV (EN/DE/FR/ES), OFX/QFX, MT940, PDFs (digital + scanned) — into unified Transactions. Deterministic parsers, LLM/vision fallback, Golden Rule + multi-currency + continuity verification, page provenance, dedupe, review, accuracy evals, CLI + REST API. 100% test coverage.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": "https://sebastienrousseau.com",
"name": "Sebastien Rousseau",
"type": "User",
"login": "sebastienrousseau",
"company": null,
"location": "London, UK",
"followers": 153,
"avatar_url": "https://avatars.githubusercontent.com/u/1394998?v=4",
"created_at": "2012-01-31T16:10:59Z",
"is_verified": null,
"public_repos": 146,
"account_age_days": 5294
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.0.11",
"kind": "patch",
"published_at": "2026-07-18T14:53:08Z"
},
{
"tag": "v0.0.10",
"kind": "patch",
"published_at": "2026-06-25T15:42:33Z"
},
{
"tag": "v0.0.9",
"kind": "patch",
"published_at": "2026-06-11T23:07:25Z"
},
{
"tag": "v0.0.8",
"kind": "patch",
"published_at": "2026-04-11T17:43:49Z"
},
{
"tag": "v0.0.7",
"kind": "patch",
"published_at": "2026-04-11T14:01:16Z"
},
{
"tag": "v0.0.6",
"kind": "patch",
"published_at": "2026-04-10T23:15:06Z"
},
{
"tag": "v0.0.5",
"kind": "patch",
"published_at": "2026-04-08T13:35:02Z"
},
{
"tag": "v0.0.4",
"kind": "patch",
"published_at": "2026-04-01T07:40:10Z"
},
{
"tag": "v0.0.3",
"kind": "patch",
"published_at": "2026-03-23T00:47:28Z"
},
{
"tag": "v0.0.2",
"kind": "patch",
"published_at": "2026-03-22T21:14:57Z"
},
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2023-11-08T21:28:21Z"
}
],
"recent_commits": [
{
"oid": "532d0255b8aca1166ee1ea2789b555cfe0c0f571",
"body": "Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.0 to 4.37.3.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/comp\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump github/codeql-action/init from 4.37.0 to 4.37.3 (#128)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-28T19:46:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57c2b4e358cd5127bc0a1461bc9c9a941940e2d8",
"body": "Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action) from 4.37.0 to 4.37.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump github/codeql-action/autobuild from 4.37.0 to 4.37.2 (#130)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-28T19:46:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "063b04f966451ae4ef1dcf983bc4feb179d5b120",
"body": "Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.0 to 4.37.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/c\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump github/codeql-action/analyze from 4.37.0 to 4.37.2 (#134)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-28T19:38:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2ffb5317968e27f7675c38a888ffd43f4a443e36",
"body": "Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.21.3 to 11.0.\n- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)\n- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.21.3...11.0)\n\n---\nupdated-dependencies:\n- depe\n[…]\nns\n dependency-version: '11.0'\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump pymdown-extensions from 10.21.3 to 11.0 (#142)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T08:52:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "27c8e8628406204294a8bc9a329157a9e7e3bb02",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb9\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump actions/checkout from 7.0.0 to 7.0.1 (#129)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T08:19:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4299e9a2d2de713d4ea5ffdc39ca298bfb27b61f",
"body": "Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.3.0 to 7.0.0.\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump actions/setup-python from 6.3.0 to 7.0.0 (#132)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T08:18:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2a74c696b729a6952fefaf386339db9383e95a24",
"body": "Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.14.0 to 1.14.1.\n- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)\n- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/cef221092ed1bacb1cc03d23a2d87d1d172e277b...ba38be9e\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#133)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T08:17:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "71a8bf68a27da0cf304edd4ca46fdaaed6ba3761",
"body": "Bumps [tzdata](https://github.com/python/tzdata) from 2026.2 to 2026.3.\n- [Release notes](https://github.com/python/tzdata/releases)\n- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)\n- [Commits](https://github.com/python/tzdata/compare/2026.2...2026.3)\n\n---\nupdated-dependencies:\n- \n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump tzdata from 2026.2 to 2026.3 (#136)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T08:16:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "37aac0cb482dd4618c29bc62675679408a0ab483",
"body": "Bumps [polars](https://github.com/pola-rs/polars) from 1.42.1 to 1.43.0.\n- [Release notes](https://github.com/pola-rs/polars/releases)\n- [Commits](https://github.com/pola-rs/polars/compare/py-1.42.1...py-1.43.0)\n\n---\nupdated-dependencies:\n- dependency-name: polars\n dependency-version: 1.43.0\n depe\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump polars from 1.42.1 to 1.43.0 (#141)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e6df988db892f9eaca64e6ff26f32cd57e5b260b",
"body": "Bumps [click](https://github.com/pallets/click) from 8.4.1 to 8.4.2.\n- [Release notes](https://github.com/pallets/click/releases)\n- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)\n- [Commits](https://github.com/pallets/click/compare/8.4.1...8.4.2)\n\n---\nupdated-dependencies:\n- depe\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump click from 8.4.1 to 8.4.2 (#140)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "650b8b421116bfc6c37ce684b164aa226e210b89",
"body": "Bumps [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings) from 1.0.4 to 1.0.6.\n- [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases)\n- [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/mkdocstrings/mkdocstrings\n[…]\nrect:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump mkdocstrings from 1.0.4 to 1.0.6 (#139)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1785f0d044b8da717e85e9a5c18ccb219c1e8b9e",
"body": "Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.49.0 to 0.51.0.\n- [Release notes](https://github.com/Kludex/uvicorn/releases)\n- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)\n- [Commits](https://github.com/Kludex/uvicorn/compare/0.49.0...0.51.0)\n\n---\nupdated\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump uvicorn from 0.49.0 to 0.51.0 (#138)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5a6763170a7585abdb0770a80a7298a3d280d19a",
"body": "Bumps [litellm](https://github.com/BerriAI/litellm) from 1.92.0 to 1.93.0.\n- [Release notes](https://github.com/BerriAI/litellm/releases)\n- [Commits](https://github.com/BerriAI/litellm/compare/v1.92.0...v1.93.0)\n\n---\nupdated-dependencies:\n- dependency-name: litellm\n dependency-version: 1.93.0\n dep\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump litellm from 1.92.0 to 1.93.0 (#137)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1812dea25870b39ac2a9693ceb3c9d6aa1182d6e",
"body": "Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.7.6 to 9.7.7.\n- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)\n- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)\n- [Commits](https://github.com/squidfunk/mkdocs-materi\n[…]\nrect:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump mkdocs-material from 9.7.6 to 9.7.7 (#135)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c223f2bb8696b6b8f6d665dee521b253f689a8a",
"body": "Bumps [hypothesis](https://github.com/HypothesisWorks/hypothesis) from 6.156.7 to 6.158.1.\n- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)\n- [Commits](https://github.com/HypothesisWorks/hypothesis/compare/v6.156.7...v6.158.1)\n\n---\nupdated-dependencies:\n- dependency-name: hy\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump hypothesis from 6.156.7 to 6.158.1 (#131)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "162f722a1f6d8919a1fce435ab3e6d59b0acc917",
"body": "Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.2.0 to 12.3.0.\n- [Release notes](https://github.com/python-pillow/Pillow/releases)\n- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)\n- [Commits](https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0)\n[…]\now\n dependency-version: 12.3.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump pillow from 12.2.0 to 12.3.0 (#127)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "22628fcd62cfc1f5d5d08e39f3da390432ab100e",
"body": "Consolidate all 17 open Dependabot PRs into a single release.\n\nPython dependencies (poetry update + regenerated hash-pinned\nrequirements.txt): fastapi 0.139.2, litellm 1.92.0, polars 1.42.1,\npypdfium2 5.12.1, typing-extensions 4.16.0, ast-serialize 0.6.0,\ncoverage 7.15.2, hypothesis 6.156.7, mypy 2.\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "chore(deps): fold all open Dependabot updates into v0.0.11",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-07-18T14:45:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c3a315f7a1915a884c0871b31527047f4b56fc3a",
"body": "…hing\n\nci: token-free PyPI trusted-publishing workflow",
"is_bot": false,
"headline": "Merge pull request #102 from sebastienrousseau/ci/pypi-trusted-publis…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T15:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5eaf91a55d7a2446952119f363f1f40d8a2f720c",
"body": "Adds OIDC trusted publishing (no long-lived token) so releases can be\npublished to PyPI from CI, consistent with the companion packages.\nTriggers on workflow_dispatch (with a tag input) or when a GitHub\nrelease is published. Requires a PyPI trusted publisher configured for\nthe bankstatementparser pr\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "ci: add token-free PyPI trusted-publishing workflow",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T15:49:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a73b917703be0f80db1e2a7ebba095737a3705bc",
"body": "chore(release): v0.0.10",
"is_bot": false,
"headline": "Merge pull request #101 from sebastienrousseau/release/v0.0.10",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T14:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61627c3173ebb6ab41c1e1e6519a46bc710b668c",
"body": "… hardening\n\nFold the [Unreleased] changes into a dated [0.0.10] entry and bump the\nversion across pyproject, setup.cfg, the README badge, and the\n.github/SECURITY.md supported-versions table.\n\nRelease contents:\n- VerificationStatus.UNVERIFIABLE + clearer deterministic-detection\n warning (#99)\n- Do\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "chore(release): v0.0.10 — UNVERIFIABLE status, warning rewrite, audit…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T14:41:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c51651d1be32d77854993b0ed9a9e2f0d42a268d",
"body": "audit: genuine 100% docs + honest 100% coverage (de-pragma)",
"is_bot": false,
"headline": "Merge pull request #100 from sebastienrousseau/audit/full-review",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T13:58:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fdfee3248564ed32bdb057b70256b041947294d",
"body": "…overage\n\nAdversarial audit against four criteria; all gates kept green.\n\nUnit tests (line+branch) genuinely 100%:\n- Removed 27 of 29 `# pragma: no cover` pragmas by making the guarded\n behaviour testable and adding real tests: the `/ingest` REST endpoint\n (400/413/200/422 branches), the API serve\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "test(audit): full-quality pass — 100% docs, pragma cleanup, example c…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T13:41:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "640a898f4799ddd88d0b0f3edf8d7c2f634168ea",
"body": "…-and-warning\n\nfix(hybrid): add UNVERIFIABLE status + clearer deterministic-detection warning",
"is_bot": false,
"headline": "Merge pull request #99 from sebastienrousseau/fix/verification-status…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T10:41:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b94ba760b6338beca47347acbd17a87001cb45e3",
"body": "Introduce VerificationStatus.UNVERIFIABLE for cases where the Golden\nRule cannot be applied (missing opening/closing balance, fewer than\ntwo statements, multi-currency balances that cannot be attributed to a\nsingle currency). Migrate every \"cannot apply the rule\" path that\npreviously reported FAILED\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "feat(hybrid): add UNVERIFIABLE status and reword detection warning",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T10:37:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a1c89c6c4acd8690b2bb1c62f32e17c23a4335a0",
"body": "chore(deps): consolidated dependency updates + security fixes",
"is_bot": false,
"headline": "Merge pull request #98 from sebastienrousseau/chore/dependency-updates",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T22:06:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d756fd096c4adbc2312a42ada3038f1e34de8f0",
"body": "Regenerate the lock to the latest compatible versions, covering the\nopen Dependabot PRs and resolving the open security alerts:\n\n- security: starlette 1.2.1 -> 1.3.1 (GHSA-82w8-qh3p-5jfq high,\n GHSA-jp82-jpqv-5vv3 low) and pypdf 6.13.2 -> 6.14.2\n (GHSA-jm82-fx9c-mx94 medium)\n- dev: mypy 1.20.2 -> \n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "chore(deps): consolidated dependency updates + security fixes",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T22:02:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "53cf4f2911da418a6b628530f1465cdef15af920",
"body": "…ns/actions/cache-6.0.0\n\nci: bump actions/cache from 4.3.0 to 6.0.0",
"is_bot": false,
"headline": "Merge pull request #95 from sebastienrousseau/dependabot/github_actio…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T21:58:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc71f36b89bd13e2d356f115b2889233789ed12a",
"body": "…ns/actions/checkout-7.0.0\n\nci: bump actions/checkout from 6.0.3 to 7.0.0",
"is_bot": false,
"headline": "Merge pull request #94 from sebastienrousseau/dependabot/github_actio…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T21:58:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02616213d9344bd4525de55e6fb8b999adf5077e",
"body": "…ns/actions/deploy-pages-5.0.0\n\nci: bump actions/deploy-pages from 4.0.5 to 5.0.0",
"is_bot": false,
"headline": "Merge pull request #81 from sebastienrousseau/dependabot/github_actio…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T21:58:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "831bef880d623b8fbc44a2bf4a702c84d3e8efe4",
"body": "…ns/actions/upload-pages-artifact-5.0.0\n\nci: bump actions/upload-pages-artifact from 3.0.1 to 5.0.0",
"is_bot": false,
"headline": "Merge pull request #82 from sebastienrousseau/dependabot/github_actio…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T21:58:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33dc36dbf3768d7c89887cdc70dc0e4472ce9ff2",
"body": "docs(readme): add PyPI version badges to Ecosystem table",
"is_bot": false,
"headline": "Merge pull request #97 from sebastienrousseau/docs/ecosystem-pypi-badges",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T20:51:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1b26c0bc1ab8521349c866e0767e39d7c6f320f",
"body": "All five companion packages are now published on PyPI at v0.0.10; add a\nPyPI column with a live version badge linking to each project page.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "docs(readme): add PyPI version badges to the Ecosystem table",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T20:47:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "836c27d2421f5d97faad770af3c85cb12d1852f9",
"body": "docs(readme): add Ecosystem section for companion packages",
"is_bot": false,
"headline": "Merge pull request #96 from sebastienrousseau/docs/companion-ecosystem",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T20:01:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b7f14ea80928513b6947c1c3632ec513ae104f2",
"body": "Document the five standalone companion repositories that build on the\ncore engine: bankstatementparser-mcp (MCP server), -lsp (MT940 LSP),\n-writer-xlsx (Excel export), -loader-mt942 and -loader-bai2 (additional\ninput formats). Adds a Contents entry and a comparison table.\n\nCo-Authored-By: Claude Opu\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "docs(readme): add Ecosystem section for companion packages",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T19:02:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e339a96594c570623241902c95b3795c9aa82664",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 6.0.0.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/0057852bfaa89a56745cba8c7296529d2fc3983\n[…]\ns:\n- dependency-name: actions/cache\n dependency-version: 6.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "ci: bump actions/cache from 4.3.0 to 6.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-24T02:33:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "943563ee650242a62f94bf234ece24561c807239",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "ci: bump actions/checkout from 6.0.3 to 7.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-24T02:33:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "259ed160b741045be9009759ffaa7a31a98b8889",
"body": "Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 3.0.1 to 5.0.0.\n- [Release notes](https://github.com/actions/upload-pages-artifact/releases)\n- [Commits](https://github.com/actions/upload-pages-artifact/compare/56afc609e74202658d3ffba0e8f6dda462b719fa...fc\n[…]\nname: actions/upload-pages-artifact\n dependency-version: 5.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "ci: bump actions/upload-pages-artifact from 3.0.1 to 5.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T02:33:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3d110e37be3dd2566d399ade9f2389eec6dca8c3",
"body": "Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4.0.5 to 5.0.0.\n- [Release notes](https://github.com/actions/deploy-pages/releases)\n- [Commits](https://github.com/actions/deploy-pages/compare/d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e...cd2ce8fcbc39b97be8ca5fce6e763baed58fa1\n[…]\npendency-name: actions/deploy-pages\n dependency-version: 5.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "ci: bump actions/deploy-pages from 4.0.5 to 5.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T02:33:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1b54034225244f6b4a42510e3183364bf39f1b24",
"body": "…egression suite, accuracy evals\n\nfeat(v0.0.9): audit pass, hybrid trust & correctness, regression suite, accuracy evals",
"is_bot": false,
"headline": "Merge PR #79: feat(v0.0.9) Audit Pass — hybrid trust & correctness, r…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T23:03:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f9388a1961d89266c6446435944c5a6c0f79ab6",
"body": "All Unreleased entries (hybrid trust slice, regression suite,\nquick wins 5-8) ship in v0.0.9; section dated 2026-06-11.",
"is_bot": false,
"headline": "docs(changelog): fold Unreleased into 0.0.9 for release",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T22:57:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c4d996aed5c118fd8b126711b5f51c2c313c493",
"body": "Plain \"bash\" on Windows runners resolves to the System32 WSL\nlauncher, which exits 1 when no distribution is installed. The\nregression tests now derive the Git Bash path from git.exe.\nAlso pin LF endings for *.sh via .gitattributes — runners check\nout with core.autocrlf=true, and CRLF breaks bash scripts.",
"is_bot": false,
"headline": "fix(ci): run shell-example tests under Git Bash on Windows",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T22:26:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01b71c5a75e66cb6f99a8ba7365471601bc29ae7",
"body": "…ES headers, eval harness\n\n5. Page provenance in the text-LLM path: extract_text_pages()\n keeps per-page text, smart_ingest attributes each row to the\n page containing its description (Transaction.source_page;\n vision rows inherit it from their bounding box). Surfaced in\n the ingest CSV and \n[…]\nks on the mock self-check and\n runs the real-model eval non-blocking, gated on the\n BSP_EVAL_MODEL repo variable.\n\n818 tests, coverage gated at 100% line+branch; docs counts and\nCHANGELOG updated.",
"is_bot": false,
"headline": "feat(hybrid): quick wins 5-8 — page provenance, continuity check, FR/…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T21:45:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f84dd048e25c0066d2e794ec72fddb1e3b07408e",
"body": "Restores pyproject.toml, setup.cfg, api.py, SECURITY.md and the\napi version test to 0.0.9. Version renumbering only happens on\nexplicit request.",
"is_bot": false,
"headline": "revert: keep version at 0.0.9 (0.1.0 bump was not requested)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T21:44:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28581f71e90baeb4752526c041fd47310cc8c791",
"body": "Two new regression modules close the gap the docs-accuracy tests left\nopen (they checked claims, not behaviour):\n\n1. tests/test_regression_examples.py — every script under examples/\n and examples/hybrid/ (plus both shell walkthroughs) runs as a real\n subprocess against the repo fixtures; optiona\n[…]\numn\nnames as the CSV body. Fixed in cli.py with an in-process\nreal-fixture test (the existing tests mocked the stats shape).\n\n815 tests, coverage gate at 100%; README/FAQ counts and CHANGELOG\nupdated.",
"is_bot": false,
"headline": "test(regression): execute every example script and doc code block in CI",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T19:41:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eaedd9dd7e65edd008fc69cb2786cb15aa7105f6",
"body": "…ing, reverify, multi-currency\n\nFour quick wins for existing users of the hybrid pipeline:\n\n1. Per-row provenance: SourceMethod gains the \"vision\" literal and\n the vision path labels its rows \"vision\" instead of \"llm\"\n (_build_result grows a source_method parameter).\n2. Confidence is acted on: n\n[…]\nfy_transactions (currency-aware dispatch) is exported from\n bankstatementparser.hybrid and shared by orchestrator and CLI.\n\n746 tests, coverage gate at 100%; README/FAQ counts and CHANGELOG\nupdated.",
"is_bot": false,
"headline": "feat(hybrid): trust & correctness slice — provenance, confidence rout…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T18:54:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d6dcd2dd3a15b013c41095a987fd18db8308a656",
"body": "The export_csv/export_json cleanup tests hardcoded\n\"/tmp/test_bsp_output.*\": on windows-latest the simulated partial\n.tmp write failed with FileNotFoundError before the cleanup branch\n(base_parser.py:111/141) could run, leaving Windows coverage at\n99.89% against the 100% gate. Build the path from\ntempfile.gettempdir() instead, and do the same for the\ndirectory-rejection check in test_security.py.",
"is_bot": false,
"headline": "fix(test): use the platform temp dir so export-cleanup runs on Windows",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T17:21:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d23b93cb78e5fea15e8cd118f827acf0fa39447",
"body": "The new windows-latest unit-test jobs surfaced three POSIX\nassumptions in the test suite:\n\n- chmod(0o000) does not revoke read access on Windows: the five\n permission tests now mock os.access / builtins.open instead,\n exercising the same parser and validator branches on every\n platform (coverage \n[…]\nn NamedTemporaryFile\n context fail with WinError 32: the nine affected tests now\n close the handle before parsing, exporting, or unlinking\n\n696 tests pass locally with the 100% coverage gate intact.",
"is_bot": false,
"headline": "fix(test): make 16 tests Windows-compatible for the CI matrix",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T17:10:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "35fe6fb7d41c05df2743941eb4056ab4ae7e5a83",
"body": "The unit-tests job's multi-line pytest command uses backslash\ncontinuations, but windows-latest executes run steps under\nPowerShell by default, which fails to parse them (ParserError:\n\"Missing expression after unary operator '--'\"). Set\n`shell: bash` on the step, matching the platform-parity job's\nexisting configuration.",
"is_bot": false,
"headline": "fix(ci): run unit-test step under bash on Windows runners",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T05:57:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7040ac257ccc515b9d105e56d6dd213871930e2a",
"body": "Implements the 9-item v0.1.0 audit plan plus 100% coverage and\ndocumentation:\n\n- BREAKING: Pain001Parser.get_summary() raises on invalid ISO 20022\n amounts instead of silently zeroing (shared _amounts.iso_decimal)\n- BREAKING: openpyxl moved to the new [excel] extra; core install no\n longer pulls i\n[…]\nCAMT\n recovery mode, and scanner failure_count; one justified pragma\n- README restyled to noyalib conventions (Contents TOC, dividers,\n Documentation table); test-count and coverage claims re-synced",
"is_bot": false,
"headline": "feat(v0.1.0): API safety, 100% coverage gate, docs site, full CI matrix",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T00:41:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "492e4e468755ff41d6043c3f55be8468d747430c",
"body": "…e gate, CLI dedupe\n\nCorrectness\n- Decimal end-to-end for all money fields; garbled or missing amounts\n now raise instead of silently becoming 0.0 (new _amounts.py helpers)\n- Dedup keys are occurrence-counted (<hash>:<n>) and include\n transaction_id/reference; fixed index-space bug in\n Deduplicat\n[…]\n03 tests pass; ruff, mypy --strict, bandit all clean\n\nDocs\n- README/FAQ/CONTRIBUTING/compliance docs: \"100% branch coverage\" and\n \"697 tests\" claims replaced with real figures (703 tests, 31 modules)",
"is_bot": false,
"headline": "feat(v0.0.9): audit remediation — Decimal correctness, honest coverag…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-10T21:40:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2a6f84b0639f5f46812a532f0a6bc3f7a101fb56",
"body": "Bumps every live version reference in the repo to 0.0.9. Historical\nmarkers (README feature-row annotations like (v0.0.8), test docstrings\nthat document when each test landed, and the CHANGELOG history) are\ndeliberately preserved.\n\nChanged\n-------\n* pyproject.toml version = \"0.0.9\"\n* setup.\n[…]\n.\n* bandit clean.\n* scripts/verify_locked_hashes.py 100 packages SHA-256 verified.\n* requirements.txt regenerated from poetry.lock (no content change\n vs. previous commit; bytes-identical 915 lines).",
"is_bot": false,
"headline": "chore(v0.0.9): bump live version strings 0.0.8 -> 0.0.9",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-10T20:04:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "11ab677fe8c9edb7cf6f8f225cfcd8920156c91d",
"body": "…t bumps\n\nThree Critical findings from the v0.0.9 internal audit, six quick wins,\nall 20 open Dependabot version-bump PRs drained, and all 18 open\nDependabot security alerts resolved. 30 files: +3,185 / -5,009.\n\nCritical fixes\n--------------\n* C-1 REST API safety floor (api.py): chunked upload with\n\n[…]\nhashes.py: 100 packages SHA-256 verified\n (down from 113 because dup-version entries dropped out).\n* pip install --dry-run --require-hashes -r requirements.txt clean\n (regenerated from poetry.lock).",
"is_bot": false,
"headline": "feat(v0.0.9): audit pass — Critical fixes, security alerts, Dependabo…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-10T19:33:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5bdabd92de0c367f542848afd8f1e1ee2ae8ac4b",
"body": "The v0.0.8 release shipped with updated counts and CHANGELOG but\nthe README content was missing for all five new features.\n\nKey Features table:\n * 5 new rows: Multi-currency verification, hledger/beancount\n export, Bulk directory scanner, Account mapping, REST API\n\nInstall section:\n * Added [en\n[…]\nsage,\n curl examples for /ingest and /health\n\nProject Layout:\n * Added enrichment/, export/, api.py lines\n * Updated descriptions to match v0.0.8 module inventory\n\n32/32 docs accuracy tests pass.",
"is_bot": false,
"headline": "docs: add v0.0.8 features to README",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T17:58:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b950a7622c9c167f06a79750646a9c0ed847d700",
"body": "723 tests, 100% coverage. Multi-currency verification, ledger export, scanner, account mapper, REST API.",
"is_bot": false,
"headline": "Merge PR #52: feat(v0.0.8) Full Platform",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T17:38:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86ed5efee52a3dd180a7300abe76f39bcb3394aa",
"body": "…or Python 3.14 compat",
"is_bot": false,
"headline": "fix(test): use asyncio.run() instead of deprecated get_event_loop() f…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T17:10:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00d584d6f09eee8364afa2ca31e15c19407b9caf",
"body": "… account mapper, REST API\n\nFive new features closing every gap identified in the competitive\nanalysis against felgru/bank-statement-parser:\n\n1. Multi-currency balance verification\n verify_balance_multi_currency() groups transactions by currency\n and runs an independent Golden Rule check per gro\n[…]\n and GET /health. Gated behind\n [api] extra. Default bind 127.0.0.1 (safe); use --host 0.0.0.0\n for container deployments.\n\n723 tests at 100% coverage, mypy strict clean, ruff clean, bandit clean.",
"is_bot": false,
"headline": "feat(v0.0.8): full platform — multi-currency, ledger export, scanner,…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T17:05:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c86f30e542221d3e83d5440d24d97d63c988aba3",
"body": "…inicpm-v, strip mode\n\n677 tests, 100% coverage. Closes the local vision 🔴→🟢 gap.",
"is_bot": false,
"headline": "Merge PR #51: feat(v0.0.7) Universal Vision — direct Ollama bridge, m…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T13:57:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9419be651bd2ec359e094413162ecab602215d3e",
"body": "Line-by-line audit found two gaps in README.md:\n\n1. CLI section listed --type camt, pain001, ingest but NOT\n --type review (added in v0.0.6). Added the review examples\n and updated the \"Supports\" line.\n\n2. Key Features table had v0.0.5 rows but no v0.0.6 or v0.0.7\n rows. Added 5 new entries: Categorization (v0.0.6),\n Interactive review (v0.0.6), Bounding boxes (v0.0.6),\n Direct Ollama bridge (v0.0.7), Strip mode (v0.0.7).",
"is_bot": false,
"headline": "docs: add --type review to CLI section + v0.0.6/v0.0.7 Key Features",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T13:52:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6787c90627906dff66b19dffd540320d52495f42",
"body": "Post-rebase corrections caught by the docs accuracy test suite:\n * README + FAQ: 644 tests -> 672 (v0.0.7 adds 28 ollama_direct\n + strip-mode tests on top of v0.0.6's 644)\n * README: 23 modules -> 24 (ollama_direct.py added)\n * .github/SECURITY.md: 0.0.7 added to Supported Versions table",
"is_bot": false,
"headline": "docs: update counts + SECURITY.md for v0.0.7 post-rebase",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:53:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59bc348f5f1920a53f205278a83dff10db74610c",
"body": "CodeQL flagged the previous assertion as\npy/incomplete-url-substring-sanitization (warning, high severity)\nbecause the rule looks for `url.startswith(prefix)` patterns used\nas sanitization checks for trusted-host validation.\n\nIn this test the startswith() was a verification that our code\ngenerates t\n[…]\ne test slightly stricter at the same time (the previous\nassertion would have passed for, e.g.,\n\"http://host.docker.internal.evil.com\" which is exactly the\nclass of bypass the CodeQL rule warns about).",
"is_bot": false,
"headline": "test: replace startswith() URL check with exact equality",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:35:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8771bd71ebdf81f2dc29a820d111e8280f8bce72",
"body": "The quality-gates.yml workflow lists every test file explicitly\n(rather than `pytest tests/`), so newly added test files have to\nbe appended manually. Adding tests/test_hybrid_ollama_direct.py\nwhich lands the 21 new tests for the v0.0.7 direct Ollama bridge.\n\nWithout this entry, CI ran 569 - 21 = 54\n[…]\npytest discovers all\ntests/test_*.py files by default) but CI used the explicit list.\n\nSame fix pattern as the v0.0.5 commit b246e09 which originally\nadded all seven hybrid test files to the workflow.",
"is_bot": false,
"headline": "ci: collect test_hybrid_ollama_direct.py in unit-tests workflow",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:35:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bb44c53c8e17387f822d5e1ad1d09217d47ed105",
"body": "CI runs `poetry install --with dev` without any extras, so httpx\n(which is a transitive dep of litellm in the [hybrid] extra and\ntherefore not in the dev environment) isn't importable on the\nsandbox. mypy on CI failed with:\n\n bankstatementparser/hybrid/ollama_direct.py:92: error: Cannot\n find impl\n[…]\nnimum install.\nThe hybrid module's runtime imports of httpx are wrapped in\ntry/except inside ollama_direct.py and raise a clear install\nhint at call time, so the no-extras path is genuinely supported.",
"is_bot": false,
"headline": "ci: add httpx to mypy ignore_missing_imports",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:35:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c85e74412743fb3908719dc9617f619401f21c84",
"body": "Documentation refresh and version bump for v0.0.7 \"Universal\nVision\". Three independent improvements stacked on top of v0.0.6:\n\n 1. Direct Ollama bridge (committed in fea4a5e parent commits)\n turns the LiteLLM long-prompt hang from 600 s into ~33 s\n 2. Recommended local vision model switched f\n[…]\nutomatically as of v0.0.7\"; the llava\n hallucination row now points at minicpm-v as the local fix;\n two new rows cover strip-mode year confabulation and\n sign-flip on small local models",
"is_bot": false,
"headline": "docs(v0.0.7): minicpm-v default + smoke-test results + version bump",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:35:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e535653b59173c8859083c403373b764d25e5c77",
"body": "Adds 6 new tests covering the strip_rows code path that landed in\nthe previous commit:\n\n test_strip_extractor_calls_completion_per_strip\n End-to-end happy path: 4 strips on a 1-page synthetic PDF,\n header strip extracts balances + 1 transaction, body strips\n extract transactions only\n[…]\nase64 image_url.\n\nAll tests use the same sys.modules monkeypatching pattern as the\nexisting single-shot vision tests, so the strip mode works in CI\nwithout pypdfium2 installed. Coverage stays at 100%.",
"is_bot": false,
"headline": "test(hybrid): strip-mode tests for VisionExtractor",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:31:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8dd67c69dfe081cea2f4d62d93c86f843fa2fdeb",
"body": "Adds bankstatementparser/hybrid/ollama_direct.py — a small (~190\nline) drop-in replacement for litellm.completion that targets\nOllama's /api/chat endpoint via httpx. Designed to sidestep the\nupstream LiteLLM ↔ Ollama integration bug discovered during the\nv0.0.5 smoke test, where vision calls with lo\n[…]\nnal dependency is needed.\n\n21 new tests in test_hybrid_ollama_direct.py mock httpx via\nsys.modules; the entire bridge is exercised end-to-end without a\nrunning Ollama instance. Coverage stays at 100%.",
"is_bot": false,
"headline": "feat(hybrid): direct Ollama bridge bypasses LiteLLM long-prompt hang",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:31:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23c738e55f432dcb6ee3d1ef09b770bcea8a08fc",
"body": null,
"is_bot": false,
"headline": "chore: gitignore example-output/ (generated export artifacts)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T09:29:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c01f13becf9e8ee70df56e86e4902eab99d13413",
"body": "Resolves GHSA-3crg-w4f6-42mx. Supersedes dependabot PR #50.\nLockfile-only change — pyproject.toml already allows >=4.0.0.",
"is_bot": false,
"headline": "chore(deps): bump pypdf 6.9.2 → 6.10.0",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T08:24:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86431e15b2a3ec667a3810ce6342fbeab5188e30",
"body": "Full v0.0.6 milestone: Python 3.9 drop, categorization, review mode, bbox mapping, security hardening. 649 tests, 100% coverage.",
"is_bot": false,
"headline": "Merge PR #48: feat(v0.0.6) Intelligence Layer — closes #44 #45 #46 #47",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T23:04:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1a1ba52535cba9f17d24a6f63216185f5516f11",
"body": "…lity\n\nThe CAMT streaming throughput test has failed twice on GitHub\nActions shared runners (9,825 and 9,914 TPS) while consistently\npassing locally (27,000+ TPS). The root cause is CPU throttling\non shared CI runners combined with pytest-cov instrumentation\noverhead, NOT a real performance regressi\n[…]\n an accidental synchronous I/O in the hot path) will fail\nthe test on every platform. The test name is updated from\ntest_camt_exceeds_10000_tps to test_camt_exceeds_8000_tps to\nmatch the new contract.",
"is_bot": false,
"headline": "fix(test): lower CAMT TPS threshold from 10,000 to 8,000 for CI stabi…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T22:16:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3d033119783bf38f2110d452c019c5203644ebe2",
"body": "New .githooks/pre-commit script that runs the same 4 gates CI\nenforces (ruff + mypy + pytest + bandit, ~80s on Apple Silicon)\nbefore every commit. If any gate fails, the commit is aborted.\n\nSetup: `make install-hooks` (or `git config core.hooksPath\n.githooks`). One-time per clone, idempotent, safe t\n[…]\nw includes `make install-hooks` in the clone\n instructions\n * New paragraph explaining the hook + how to skip on WIP\n\nREADME.md Local Development:\n * Added `make install-hooks` to the setup block",
"is_bot": false,
"headline": "chore: add pre-commit hook running full `make verify` pipeline",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T21:32:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d72cd140a572fccacaed1b4e143e6cce87fd981b",
"body": "New test_docs_accuracy.py with 32 tests across 8 categories that\nvalidate every factual claim in README, FAQ, CHANGELOG,\nCONTRIBUTING, SECURITY, and the example scripts against the\nactual codebase. If a doc gets stale, the test fails with a clear\nmessage telling the developer what to fix.\n\nCategorie\n[…]\nfunction counting) is 644.\npytest --collect-only shows 649 because benchmark fixtures\ngenerate multiple test items from a single def test_* function.\n\nCI workflow updated to include the new test file.",
"is_bot": false,
"headline": "test(docs): automated docs/README/examples accuracy validation",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T21:03:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c1ec8fd9cb7c0c1c6fd2c5e130178d4eaad4b7f9",
"body": "Addresses every real finding from the pre-merge security,\ncorrectness, and performance audit.\n\nSECURITY\n\n S1 — Prompt injection defense in enrichment categorizer.\n New _sanitize_for_prompt() strips ASCII control characters,\n neutralizes common injection markers ([SYSTEM, [INST), and\n removes bac\n[…]\n_injection_markers\n * test_categorize_warns_on_duplicate_llm_index\n * test_ingest_result_from_json_rejects_oversized_payload\n\n617 tests at 100% coverage, mypy strict clean, ruff clean,\nbandit clean.",
"is_bot": false,
"headline": "fix(security+correctness): deep-dive audit findings",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T19:35:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6d8e298584aba62cb4eeb1cfa7d172b6c344c65c",
"body": "Audit finding: four files had stale \"541 tests\" counts that should\nbe 612 (the feat/v0.0.6 branch added 71 tests for #44/#45/#46).\nREADME module count was \"21\" but the actual count is 23 (the new\nenrichment/ subpackage adds 2 files: __init__.py + categorizer.py).\n\nREADME.md\n * \"541 tests\" -> \"612 t\n[…]\n#46, #47\"\n\nCross-referenced against actual counts:\n pytest --collect-only 612 tests collected\n find -name \"*.py\" 23 modules\n ls examples/** 22 scripts (14 deterministic + 8 hybrid)",
"is_bot": false,
"headline": "docs: fix stale counts + expand v0.0.6 CHANGELOG to full milestone",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T19:05:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "700824737eafec742512c7da1aabd435b05c36da",
"body": "The previous commit added the [enrichment] extra to pyproject.toml\n(litellm only) without regenerating the lockfile. CI fails with\n\"pyproject.toml changed significantly since poetry.lock was last\ngenerated\" — same pattern as the v0.0.5 lockfile refresh.",
"is_bot": false,
"headline": "chore(deps): refresh poetry.lock for [enrichment] extra",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T17:59:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66433e5a20a81105d564800718e45496f8143811",
"body": "Adds tests/test_enrichment_categorizer.py and\ntests/test_hybrid_review_cli.py to the quality-gates.yml explicit\ntest file list. Without this, CI runs 612 - 52 = 560 tests and\nmisses the new modules' coverage.",
"is_bot": false,
"headline": "ci: collect enrichment + review CLI tests in workflow",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T17:51:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc355a6d059a91c73793dd27e346967392b77e3b",
"body": "…ound-trip\n\nCloses #45.\n\nIngestResult JSON serialization:\n * New to_json() instance method produces a stable JSON string\n with schema_version=1, Decimal amounts as strings (no float\n drift), ISO-formatted dates, VerificationStatus enum values,\n and an audit_trail array.\n * New from_json()\n[…]\ntus,\ncorrupt-JSON, explicit-output-path, bbox+raw rendering,\nEOF-as-quit, missing-extra, dispatch-via-run,\nconfidence-absent).\n\n612 tests at 100% line + branch coverage, mypy strict clean,\nruff clean.",
"is_bot": false,
"headline": "feat(cli): interactive --type review subcommand + IngestResult JSON r…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T17:50:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8a697cbb8f4a3d73ae8f8582482a7d35dd832a7a",
"body": "Closes #44.\n\nNew bankstatementparser.enrichment subpackage behind the\n[enrichment] install extra (just litellm — no additional deps).\n\n Categorizer LiteLLM-backed transaction categorizer\n with pluggable schema and batch support\n EnrichedTransaction Wrapper (no\n[…]\ne boundaries, case\nnormalization, unknown categories, missing/optional fields,\nmissing-row handling, graceful failure on LLM errors, JSON\nparsing (fenced, prose-wrapped, invalid), and prompt building.",
"is_bot": false,
"headline": "feat(enrichment): categorization module with pluggable schema",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T17:50:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "719571710dee848175493b523bb7e1014d858062",
"body": "Closes #46.\n\nNew BoundingBox Pydantic model in transaction_models.py with\nnormalized (0.0-1.0) coordinates, page_index, and frozen config.\nNew Transaction.source_bbox: Optional[BoundingBox] field populated\nby the vision path when the multimodal model returns spatial\ncoordinates (always None for dete\n[…]\nw tests in test_hybrid_llm_extractor.py covering: bbox\npresent, bbox with explicit page_index, bbox omitted, bbox\nexplicitly null, non-object bbox, missing required keys, and\nout-of-range coordinates.",
"is_bot": false,
"headline": "feat(model): BoundingBox + Transaction.source_bbox + vision bbox prompts",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T17:50:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6399c814b407bb3b48933f58162ca8bfb2ca3022",
"body": "P2 polishing items from the v0.0.6 audit that touch source files\nrather than docs:\n\n bankstatementparser/hybrid/orchestrator.py\n * Module docstring expanded from a one-line summary to a\n structured Sphinx-style description of the three-path\n routing (Path A deterministic, Path B text-L\n[…]\nPython floor changes, classifiers, and version\nbumps. The setup.* files only need to be touched when one of\nthose changes affects pip-21.3-or-older compatibility (which\nis essentially never in 2026+).",
"is_bot": false,
"headline": "docs(code): orchestrator docstring + legacy setup mirror annotations",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T16:43:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "db7f5e0e2a02d8bc900c09f73d722456af71e6b5",
"body": "Implements all P1 and P2 items from the v0.0.6 documentation audit.\n\nP1 — Missing context\n\n CONTRIBUTING.md\n * New \"Optional extras for hybrid pipeline work\" subsection\n listing [hybrid], [hybrid-plus], and [hybrid-vision] with\n one-line guidance per extra\n * `make verify` recommend\n[…]\nCross-platform matrix in examples/hybrid/README.md updated\n to reflect that native Windows is now fully covered\n\n examples/README.md\n * Hybrid section gains the .ps1 row alongside the .sh row",
"is_bot": false,
"headline": "docs: P1 + P2 audit fixes for v0.0.6",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T16:41:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "55afee2ac76bf957e4e9d3e4955ae4bb2d2704c0",
"body": "The previous Makefile used `python3 setup.py sdist bdist_wheel` and\n`twine upload`, which contradicted the actual v0.0.5 release flow\n(`poetry build` + `poetry publish`) and pointed at drifting setup.py\nmetadata. Anyone running `make release` would have produced an\nartifact from the legacy parallel \n[…]\n.md's\n signed-commits policy\n * Pushes the branch and the tag separately so a failed publish\n leaves the tag visible upstream for retry\n\nResolves the P0 alignment finding from the v0.0.6 audit.",
"is_bot": false,
"headline": "chore!: modernise Makefile for Poetry-based build + release flow",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T16:40:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "755105c84d0c0924f291a995351ba52ff88f9327",
"body": "CHANGELOG.md\n * New v0.0.6 section with Removed / Security / Changed / Fixed /\n Migration notes subsections\n * Security table mapping each transitive package to its v0.0.5\n -> v0.0.6 version bump and the GHSAs that close as a result\n * Migration note explicitly tells Python 3.9 holdouts to \n[…]\n v=0.0.6\n * Requirements line \"Python **3.9** through **3.14**\" -> \"Python\n **3.10** through **3.14** (Python 3.9 was dropped in v0.0.6 —\n pin to v0.0.5 if you cannot upgrade your interpreter)\"",
"is_bot": false,
"headline": "docs: v0.0.6 changelog entry + README Python floor update",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T16:00:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fea4a5e984500d82c1f83e30cc5ddce5dc04b120",
"body": "BREAKING CHANGE: minimum supported Python is now 3.10. Users on\nPython 3.9 must stay on v0.0.5 or upgrade their interpreter. The\npublic API is unchanged.\n\nCloses #47.\n\nPython 3.9 reached end-of-life on 2025-10-31. v0.0.5 shipped with\nnine transitive CVEs allow-listed in security.yml because the\npatc\n[…]\ner/, tests/, examples/\n * bandit clean\n * All hybrid examples (01 deterministic, 02 text-LLM mock,\n 03 vision mock, 04 golden rule, 05 dedupe) still run\n end-to-end with the new dependency set",
"is_bot": false,
"headline": "feat!: drop Python 3.9 support, clear transitive CVE allow-list",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T15:57:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c67f5076eb60c6ee0ab9fb2800e40910c7b135a4",
"body": "… vision fallback\n\nRelease v0.0.5 — Universal Extraction. 13 commits, 541 tests, 100% coverage. See CHANGELOG.md for the full breakdown.",
"is_bot": false,
"headline": "Merge PR #43: feat(v0.0.5) hybrid deterministic + LLM extraction with…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T13:11:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b512cd70d2aba8520ce7e0d3ca9e8fe2350aa5de",
"body": "Three pre-release polish items consolidated into one commit so the\nv0.0.5 tag has a clean tip:\n\n1. Console-script entry point\n * New `bankstatementparser.cli.main()` wrapper\n * `[tool.poetry.scripts]` block in pyproject.toml mapping the\n `bankstatementparser` command to `cli:main`\n * Both \n[…]\ns\n\nVerified: 541 tests at 100% coverage, mypy strict clean, ruff\nclean, bandit clean. The console-script smoke test against the\nCAMT.053 fixture returns the expected DataFrame with all v0.0.5\ncolumns.",
"is_bot": false,
"headline": "docs: pre-release polish — console script, README, CHANGELOG",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T13:05:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e497ebd6bdc81df4be82b8d2bdc66c930abb2894",
"body": "Ran every example end-to-end against local Ollama models on Apple\nSilicon (llama3 4.7 GB, llava 4.7 GB) to validate the library code\nwith the real LLM stack.\n\nFindings:\n\n Path A (deterministic) PERFECT — CAMT.053 fixture, 3 tx, all\n hashes correct\n Path B (text-LLM) \n[…]\nn its\nprocessing time. The default 2.0x is correct for hosted models\nwhich is what we now recommend in the inline comment.\n\nTest suite: still 540 tests at 100% coverage, ruff clean, mypy\nstrict clean.",
"is_bot": false,
"headline": "docs(examples): record smoke-test results against real Ollama models",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T12:30:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "86470870f8b2fee4da8468433005e99dd535d30d",
"body": "Bandit B101 flagged the three `assert` statements in the example as\nunsafe because asserts are stripped under `python -O`. Replaced\nthem with an `_expect()` helper that raises SystemExit on contract\nviolation. Example output is unchanged in the happy path, but the\nfailure mode is now stable under all Python optimisation levels —\nwhich is the right behaviour for a script that doubles as a model\nfor downstream users to copy.",
"is_bot": false,
"headline": "ci: replace asserts with explicit raises in 04_golden_rule example",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T09:46:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec7b5828481efccf39a712fa789f1b4d6153ea98",
"body": "Adds end-to-end runnable demonstrations of every v0.0.5 hybrid code\npath under examples/hybrid/. Real bank PDFs cannot be redistributed\n(PII + copyright), so the suite ships a `generate_sample_pdfs.py`\nscript that produces two reproducible synthetic UK-bank statements:\n\n digital.pdf text-layer PD\n[…]\nstrict\nclean, ruff clean, all five Python examples run end-to-end against\nthe live library (text-LLM and vision examples in MOCK mode), CLI\ningest subcommand smoke-tested against the CAMT.053 fixture.",
"is_bot": false,
"headline": "docs(examples): add hybrid pipeline walkthrough with synthetic PDFs",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T09:38:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a75f63588010be6575d2c1b65a0bec4ea67868c5",
"body": "GHSA-gc5v-m9x4-r6x2 — insecure temp file reuse in\nrequests.utils.extract_zipped_paths(). Reachable only if a caller\nexplicitly invokes that helper to extract a zipped path bundle,\nwhich we never do — our only use of requests is through litellm's\nHTTP client. Patched in 2.33.0 which requires Python >\n[…]\n If a sixth surfaces,\nthe strategic fix is to scope the [hybrid] extras to Python >=\n3.10 rather than continuing to allow-list each transitive issue\nindividually. Python 3.9 reached EOL on 2025-10-31.",
"is_bot": false,
"headline": "ci: allow-list requests temp-file CVE (3.9 only)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:44:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a00518ff163fe3a5f65ea72d79a6ba2b4b564873",
"body": "GHSA-w853-jp5j-5j7f and GHSA-qmgc-5h2g-mvrw — both TOCTOU symlink\nraces during lock acquisition, requiring an attacker with write\naccess to the user's lockfile parent directory. For a local CLI\nbank-statement parser, an attacker at that privilege level can read\nthe source statements directly; the fi\n[…]\n.3, both require Python >= 3.10.\nFilelock on Python 3.10+ already resolves to 3.25.2 (clean); the\nvulnerable 3.19.1 is locked only for the narrow `python_version\n== \"3.9\" and extra == \"hybrid\"` slice.",
"is_bot": false,
"headline": "ci: allow-list filelock TOCTOU CVEs (3.9 + hybrid only)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:38:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e396fca6eeef7eb6cd9f85d30397a0369aec8b06",
"body": "GHSA-cfh3-3jmp-rvhc — out-of-bounds write loading PSD images,\npatched in pillow 12.1.1 which requires Python >= 3.10. Pillow on\nPython 3.10+ already resolves to 12.2.0 (clean); the vulnerable\n11.3.0 is locked only for the very narrow\n`python_version == \"3.9\" and extra == \"hybrid-plus\"` slice.\n\nThe PSD decoder is reachable only if a caller hands a Photoshop\nfile to Pillow — our PDF rendering path only emits and reads PNG,\nso the vulnerable code is not on any execution path we ship.",
"is_bot": false,
"headline": "ci: allow-list pillow PSD decoder CVE (3.9 + hybrid-plus only)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:32:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6e7417f7e3f5b19b0d9c5b7bccb37c98d47e1ce",
"body": "GHSA-m959-cc7f-wv43 (incomplete DNS name constraint enforcement on\nX.509 peer names) was the third cryptography@43.0.3 advisory not\ncaught by the previous allow-list pass. Same scope justification as\nthe other two: we never use cryptography to validate X.509 certs\nfor peer authentication, so the vulnerable code path is unreachable\nfrom anything we ship. Patched in 46.0.6, blocked by the same\nPython > 3.9.1 floor as the rest of the cryptography series.",
"is_bot": false,
"headline": "ci: add third cryptography advisory to allow-list",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:27:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a75fce3b66fbac5b54e5c52293f660b2d6cad107",
"body": "Two more advisories surfaced after the litellm allow-list landed,\nboth on cryptography@43.0.3 which litellm pulls in transitively:\n\n GHSA-r6ph-v2qm-q3c2 SECT curve subgroup attack (high)\n GHSA-79v4-65xg-pq4g OpenSSL bundled in older wheels (low)\n\nNeither is reachable from our import surface — we\n[…]\n1, while bankstatementparser still supports Python\n3.9.0/3.9.1, so Poetry cannot bump them across the matrix. Same\n\"revisit when minimum Python is raised\" reminder as the litellm\nallow-list documents.",
"is_bot": false,
"headline": "ci: allow-list cryptography proxy CVEs (transitive via litellm)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:24:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b246e0937eee6ccb4ac4da7251b2bc90dce040ad",
"body": "Three CI fixes required after the initial v0.0.5 push:\n\n1. Unit-test workflow explicitly listed every test file by name and\n never picked up the seven new hybrid test files, which dropped\n coverage to 83%. Added all tests/test_hybrid_*.py to the list.\n\n2. Bandit flagged `except Exception: contin\n[…]\non `dependency-review-action` with a documented \"revisit when the\n minimum Python is raised\" comment.\n\nLocally verified: 540 tests pass at 100% coverage, mypy strict clean,\nruff clean, bandit clean.",
"is_bot": false,
"headline": "ci: collect hybrid tests, narrow bandit catch, allow litellm proxy CVEs",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:17:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c70d5b1d801237e27b54fcad86c58eff8be417a",
"body": "Regenerates the lock file to match pyproject.toml after adding the\n[hybrid], [hybrid-plus], and [hybrid-vision] extras. Fixes CI failures\nwhere every job exited with:\n\n pyproject.toml changed significantly since poetry.lock was last\n generated. Run `poetry lock` to fix the lock file.\n\nAlso pic\n[…]\n\nsuperseding PRs #41 and #42:\n\n * ruff 0.15.8 -> 0.15.9\n * tzdata 2023.3 -> 2026.1\n\nVerified locally: ruff 0.15.9 lint clean, mypy strict clean, 540 tests\npassing with 100% line+branch coverage.",
"is_bot": false,
"headline": "chore(deps): refresh poetry.lock for v0.0.5 extras",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T07:56:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3b2fc17a462a5e014ffcce7e9bbba9cdc1ecca7",
"body": "Release v0.0.5 \"Universal Extraction\". Combines the deterministic\nreliability of the ISO/exchange-format parsers with an adaptive\nLLM layer for unstandardized PDFs, including a multimodal vision\nfallback for scanned/image-only statements.\n\nArchitecture — three extraction paths via `smart_ingest()`:\n\n[…]\nmypy strict clean. All optional\ndependencies (litellm, pypdf, pypdfium2) are monkeypatched via\n`sys.modules` or completion-function injection, so CI does not\nrequire any of the extras to be installed.",
"is_bot": false,
"headline": "feat(hybrid): add deterministic+LLM pipeline with vision fallback",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T07:22:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "80a6454578619a818b5f12c77da378a6ee8322bd",
"body": "Sweep-only change across 14 files. No functional modifications.\nFiles that also receive feature changes in v0.0.5 (cli, model,\ndeduplicator, input_validator) carry their updated headers alongside\nthose changes in the follow-up commit.",
"is_bot": false,
"headline": "chore: update copyright headers to 2023-2026 Bank Statement Parser",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T07:21:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "342363e5c554c72011e1d4a0537f32085fa2c967",
"body": "---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "fix: bust GitHub badge cache for PyPI Python versions",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-01T14:29:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f00eb80ced2734b255488ee3346a23d3b474195",
"body": "deps: bump ruff to 0.15.8 and codeql-action to 4.35.1",
"is_bot": false,
"headline": "deps: bump ruff to 0.15.8 and codeql-action to 4.35.1",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-01T13:55:17Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 11,
"commits_last_year": 154,
"latest_release_at": "2026-07-18T14:53:08Z",
"latest_release_tag": "v0.0.11",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 11,
"days_since_latest_release": 12,
"mean_days_between_releases": 13.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "bankstatementparser",
"exists": true,
"license": "Apache Software License",
"keywords": [
"License :: Other/Proprietary License",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.13",
"Programming Language :: Python :: 3.14"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/bankstatementparser/",
"is_deprecated": false,
"latest_version": "0.0.11",
"repository_url": "https://github.com/sebastienrousseau/bankstatementparser",
"versions_count": 8,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2023-11-08T21:26:11.541122Z",
"latest_published_at": "2026-07-18T14:53:37.152696Z",
"latest_version_yanked": null,
"days_since_latest_publish": 12
}
]
},
"popularity": {
"forks": 8,
"stars": 38,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2024-10-12",
"count": 1
},
{
"date": "2025-09-19",
"count": 1
},
{
"date": "2026-04-27",
"count": 1
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-06-01",
"count": 1
},
{
"date": "2026-06-10",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
},
{
"date": "2026-07-26",
"count": 1
}
],
"complete": true,
"collected": 8,
"total_forks": 8
},
"star_history": null,
"open_issues_and_prs": 9
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"mise.toml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 52634,
"source_files_sampled": 107,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml",
"requirements.txt",
"setup.cfg"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 13,
"malicious_count": 0,
"assessed_package": "pypi:bankstatementparser@0.0.11",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "lxml",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=5.0"
},
{
"name": "openpyxl",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "^3.1.5"
},
{
"name": "pandas",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "^2.3.3"
},
{
"name": "defusedxml",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "^0.7.1"
},
{
"name": "pydantic",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "^2.11.0"
},
{
"name": "polars",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "^1.32.0"
},
{
"name": "litellm",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.83.10"
},
{
"name": "pypdf",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=4.0.0"
},
{
"name": "pdfplumber",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.11.0"
},
{
"name": "pypdfium2",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=4.30.0"
},
{
"name": "fastapi",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.115.0"
},
{
"name": "uvicorn",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.34.0"
},
{
"name": "lxml",
"manifest": "setup.cfg",
"ecosystem": "pypi",
"version_constraint": ">=4.9.3"
},
{
"name": "openpyxl",
"manifest": "setup.cfg",
"ecosystem": "pypi",
"version_constraint": ">=3.1.2"
},
{
"name": "pandas",
"manifest": "setup.cfg",
"ecosystem": "pypi",
"version_constraint": ">=2.1.1"
},
{
"name": "defusedxml",
"manifest": "setup.cfg",
"ecosystem": "pypi",
"version_constraint": ">=0.7.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "defusedxml",
"direct": true,
"version": "0.7.1",
"ecosystem": "pypi"
},
{
"name": "fastapi",
"direct": true,
"version": "0.139.2",
"ecosystem": "pypi"
},
{
"name": "litellm",
"direct": true,
"version": "1.93.0",
"ecosystem": "pypi"
},
{
"name": "lxml",
"direct": true,
"version": "6.1.1",
"ecosystem": "pypi"
},
{
"name": "openpyxl",
"direct": true,
"version": "3.1.5",
"ecosystem": "pypi"
},
{
"name": "pandas",
"direct": true,
"version": "2.3.3",
"ecosystem": "pypi"
},
{
"name": "pdfplumber",
"direct": true,
"version": "0.11.10",
"ecosystem": "pypi"
},
{
"name": "polars",
"direct": true,
"version": "1.43.0",
"ecosystem": "pypi"
},
{
"name": "pydantic",
"direct": true,
"version": "2.13.4",
"ecosystem": "pypi"
},
{
"name": "pypdf",
"direct": true,
"version": "6.14.2",
"ecosystem": "pypi"
},
{
"name": "pypdfium2",
"direct": true,
"version": "5.12.1",
"ecosystem": "pypi"
},
{
"name": "uvicorn",
"direct": true,
"version": "0.51.0",
"ecosystem": "pypi"
},
{
"name": "aiohappyeyeballs",
"direct": false,
"version": "2.6.2",
"ecosystem": "pypi"
},
{
"name": "aiohttp",
"direct": false,
"version": "3.14.1",
"ecosystem": "pypi"
},
{
"name": "aiosignal",
"direct": false,
"version": "1.4.0",
"ecosystem": "pypi"
},
{
"name": "annotated-doc",
"direct": false,
"version": "0.0.4",
"ecosystem": "pypi"
},
{
"name": "annotated-types",
"direct": false,
"version": "0.7.0",
"ecosystem": "pypi"
},
{
"name": "anyio",
"direct": false,
"version": "4.13.0",
"ecosystem": "pypi"
},
{
"name": "ast-serialize",
"direct": false,
"version": "0.6.0",
"ecosystem": "pypi"
},
{
"name": "async-timeout",
"direct": false,
"version": "5.0.1",
"ecosystem": "pypi"
},
{
"name": "attrs",
"direct": false,
"version": "26.1.0",
"ecosystem": "pypi"
},
{
"name": "babel",
"direct": false,
"version": "2.18.0",
"ecosystem": "pypi"
},
{
"name": "backrefs",
"direct": false,
"version": "7.0",
"ecosystem": "pypi"
},
{
"name": "bandit",
"direct": false,
"version": "1.9.4",
"ecosystem": "pypi"
},
{
"name": "certifi",
"direct": false,
"version": "2026.5.20",
"ecosystem": "pypi"
},
{
"name": "cffi",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "charset-normalizer",
"direct": false,
"version": "3.4.7",
"ecosystem": "pypi"
},
{
"name": "click",
"direct": false,
"version": "8.4.2",
"ecosystem": "pypi"
},
{
"name": "colorama",
"direct": false,
"version": "0.4.6",
"ecosystem": "pypi"
},
{
"name": "coverage",
"direct": false,
"version": "7.15.2",
"ecosystem": "pypi"
},
{
"name": "cryptography",
"direct": false,
"version": "48.0.1",
"ecosystem": "pypi"
},
{
"name": "distro",
"direct": false,
"version": "1.9.0",
"ecosystem": "pypi"
},
{
"name": "et-xmlfile",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "exceptiongroup",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "fastuuid",
"direct": false,
"version": "0.14.0",
"ecosystem": "pypi"
},
{
"name": "filelock",
"direct": false,
"version": "3.29.3",
"ecosystem": "pypi"
},
{
"name": "frozenlist",
"direct": false,
"version": "1.8.0",
"ecosystem": "pypi"
},
{
"name": "fsspec",
"direct": false,
"version": "2026.4.0",
"ecosystem": "pypi"
},
{
"name": "ghp-import",
"direct": false,
"version": "2.1.0",
"ecosystem": "pypi"
},
{
"name": "griffelib",
"direct": false,
"version": "2.0.2",
"ecosystem": "pypi"
},
{
"name": "h11",
"direct": false,
"version": "0.16.0",
"ecosystem": "pypi"
},
{
"name": "hf-xet",
"direct": false,
"version": "1.5.1",
"ecosystem": "pypi"
},
{
"name": "httpcore",
"direct": false,
"version": "1.0.9",
"ecosystem": "pypi"
},
{
"name": "httpx",
"direct": false,
"version": "0.28.1",
"ecosystem": "pypi"
},
{
"name": "huggingface-hub",
"direct": false,
"version": "1.18.0",
"ecosystem": "pypi"
},
{
"name": "hypothesis",
"direct": false,
"version": "6.156.7",
"ecosystem": "pypi"
},
{
"name": "hypothesis",
"direct": false,
"version": "6.158.1",
"ecosystem": "pypi"
},
{
"name": "idna",
"direct": false,
"version": "3.18",
"ecosystem": "pypi"
},
{
"name": "importlib-metadata",
"direct": false,
"version": "8.9.0",
"ecosystem": "pypi"
},
{
"name": "iniconfig",
"direct": false,
"version": "2.3.0",
"ecosystem": "pypi"
},
{
"name": "interrogate",
"direct": false,
"version": "1.7.0",
"ecosystem": "pypi"
},
{
"name": "jinja2",
"direct": false,
"version": "3.1.6",
"ecosystem": "pypi"
},
{
"name": "jiter",
"direct": false,
"version": "0.15.0",
"ecosystem": "pypi"
},
{
"name": "jsonschema",
"direct": false,
"version": "4.26.0",
"ecosystem": "pypi"
},
{
"name": "jsonschema-specifications",
"direct": false,
"version": "2025.9.1",
"ecosystem": "pypi"
},
{
"name": "librt",
"direct": false,
"version": "0.13.0",
"ecosystem": "pypi"
},
{
"name": "markdown",
"direct": false,
"version": "3.10.2",
"ecosystem": "pypi"
},
{
"name": "markdown-it-py",
"direct": false,
"version": "4.2.0",
"ecosystem": "pypi"
},
{
"name": "markupsafe",
"direct": false,
"version": "3.0.3",
"ecosystem": "pypi"
},
{
"name": "mdurl",
"direct": false,
"version": "0.1.2",
"ecosystem": "pypi"
},
{
"name": "mergedeep",
"direct": false,
"version": "1.3.4",
"ecosystem": "pypi"
},
{
"name": "mkdocs",
"direct": false,
"version": "1.6.1",
"ecosystem": "pypi"
},
{
"name": "mkdocs-autorefs",
"direct": false,
"version": "1.4.4",
"ecosystem": "pypi"
},
{
"name": "mkdocs-get-deps",
"direct": false,
"version": "0.2.2",
"ecosystem": "pypi"
},
{
"name": "mkdocs-material",
"direct": false,
"version": "9.7.7",
"ecosystem": "pypi"
},
{
"name": "mkdocs-material-extensions",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "mkdocstrings",
"direct": false,
"version": "1.0.6",
"ecosystem": "pypi"
},
{
"name": "mkdocstrings-python",
"direct": false,
"version": "2.0.4",
"ecosystem": "pypi"
},
{
"name": "multidict",
"direct": false,
"version": "6.7.1",
"ecosystem": "pypi"
},
{
"name": "mypy",
"direct": false,
"version": "2.3.0",
"ecosystem": "pypi"
},
{
"name": "mypy-extensions",
"direct": false,
"version": "1.1.0",
"ecosystem": "pypi"
},
{
"name": "numpy",
"direct": false,
"version": "2.2.6",
"ecosystem": "pypi"
},
{
"name": "openai",
"direct": false,
"version": "2.41.1",
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": false,
"version": "26.2",
"ecosystem": "pypi"
},
{
"name": "paginate",
"direct": false,
"version": "0.5.7",
"ecosystem": "pypi"
},
{
"name": "pathspec",
"direct": false,
"version": "1.1.1",
"ecosystem": "pypi"
},
{
"name": "pdfminer-six",
"direct": false,
"version": "20260107",
"ecosystem": "pypi"
},
{
"name": "pillow",
"direct": false,
"version": "12.3.0",
"ecosystem": "pypi"
},
{
"name": "platformdirs",
"direct": false,
"version": "4.10.0",
"ecosystem": "pypi"
},
{
"name": "pluggy",
"direct": false,
"version": "1.6.0",
"ecosystem": "pypi"
},
{
"name": "polars-runtime-32",
"direct": false,
"version": "1.43.0",
"ecosystem": "pypi"
},
{
"name": "propcache",
"direct": false,
"version": "0.5.2",
"ecosystem": "pypi"
},
{
"name": "py",
"direct": false,
"version": "1.11.0",
"ecosystem": "pypi"
},
{
"name": "py-cpuinfo",
"direct": false,
"version": "9.0.0",
"ecosystem": "pypi"
},
{
"name": "pycparser",
"direct": false,
"version": "3.0",
"ecosystem": "pypi"
},
{
"name": "pydantic-core",
"direct": false,
"version": "2.46.4",
"ecosystem": "pypi"
},
{
"name": "pygments",
"direct": false,
"version": "2.20.0",
"ecosystem": "pypi"
},
{
"name": "pymdown-extensions",
"direct": false,
"version": "11.0",
"ecosystem": "pypi"
},
{
"name": "pytest",
"direct": false,
"version": "9.1.1",
"ecosystem": "pypi"
},
{
"name": "pytest-benchmark",
"direct": false,
"version": "5.2.3",
"ecosystem": "pypi"
},
{
"name": "pytest-cov",
"direct": false,
"version": "7.1.0",
"ecosystem": "pypi"
},
{
"name": "python-dateutil",
"direct": false,
"version": "2.9.0.post0",
"ecosystem": "pypi"
},
{
"name": "python-dotenv",
"direct": false,
"version": "1.2.2",
"ecosystem": "pypi"
},
{
"name": "pytz",
"direct": false,
"version": "2026.2",
"ecosystem": "pypi"
},
{
"name": "pyyaml",
"direct": false,
"version": "6.0.3",
"ecosystem": "pypi"
},
{
"name": "pyyaml-env-tag",
"direct": false,
"version": "1.1",
"ecosystem": "pypi"
},
{
"name": "referencing",
"direct": false,
"version": "0.37.0",
"ecosystem": "pypi"
},
{
"name": "regex",
"direct": false,
"version": "2026.5.9",
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": false,
"version": "2.34.2",
"ecosystem": "pypi"
},
{
"name": "rich",
"direct": false,
"version": "15.0.0",
"ecosystem": "pypi"
},
{
"name": "rpds-py",
"direct": false,
"version": "0.30.0",
"ecosystem": "pypi"
},
{
"name": "ruff",
"direct": false,
"version": "0.15.22",
"ecosystem": "pypi"
},
{
"name": "shellingham",
"direct": false,
"version": "1.5.4",
"ecosystem": "pypi"
},
{
"name": "six",
"direct": false,
"version": "1.17.0",
"ecosystem": "pypi"
},
{
"name": "sniffio",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "sortedcontainers",
"direct": false,
"version": "2.4.0",
"ecosystem": "pypi"
},
{
"name": "starlette",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "stevedore",
"direct": false,
"version": "5.8.0",
"ecosystem": "pypi"
},
{
"name": "tabulate",
"direct": false,
"version": "0.10.0",
"ecosystem": "pypi"
},
{
"name": "tiktoken",
"direct": false,
"version": "0.13.0",
"ecosystem": "pypi"
},
{
"name": "tokenizers",
"direct": false,
"version": "0.23.1",
"ecosystem": "pypi"
},
{
"name": "tomli",
"direct": false,
"version": "2.4.1",
"ecosystem": "pypi"
},
{
"name": "tqdm",
"direct": false,
"version": "4.68.2",
"ecosystem": "pypi"
},
{
"name": "typer",
"direct": false,
"version": "0.25.1",
"ecosystem": "pypi"
},
{
"name": "typing-extensions",
"direct": false,
"version": "4.16.0",
"ecosystem": "pypi"
},
{
"name": "typing-inspection",
"direct": false,
"version": "0.4.2",
"ecosystem": "pypi"
},
{
"name": "tzdata",
"direct": false,
"version": "2026.3",
"ecosystem": "pypi"
},
{
"name": "urllib3",
"direct": false,
"version": "2.7.0",
"ecosystem": "pypi"
},
{
"name": "watchdog",
"direct": false,
"version": "6.0.0",
"ecosystem": "pypi"
},
{
"name": "yarl",
"direct": false,
"version": "1.24.2",
"ecosystem": "pypi"
},
{
"name": "zipp",
"direct": false,
"version": "4.1.0",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 121,
"direct_count": 12,
"indirect_count": 109
}
},
"maintainership": {
"issues": {
"open_prs": 9,
"merged_prs": 41,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 7,
"closed_unmerged_prs": 94
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "sebastienrousseau",
"commits": 141,
"avatar_url": "https://avatars.githubusercontent.com/u/1394998?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"commit-signature-verification.yml",
"docs.yml",
"pypi-publish.yml",
"quality-gates.yml",
"release-integrity.yml",
"security.yml"
],
"has_docs_dir": true,
"linter_configs": [
".pylintrc"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"poetry.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/6 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 8,
"reason": "dependency not pinned by hash detected -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "532d0255b8aca1166ee1ea2789b555cfe0c0f571",
"ran_at": "2026-07-31T00:30:37Z",
"aggregate_score": 7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-29T02:33:51Z",
"oldest_open_prs": [
{
"number": 143,
"created_at": "2026-07-29T02:33:36Z",
"last_comment_at": "2026-07-29T02:33:37Z",
"last_comment_author": "dependabot"
},
{
"number": 144,
"created_at": "2026-07-29T02:33:43Z",
"last_comment_at": "2026-07-29T02:33:44Z",
"last_comment_author": "dependabot"
},
{
"number": 145,
"created_at": "2026-07-29T02:33:48Z",
"last_comment_at": "2026-07-29T02:33:49Z",
"last_comment_author": "dependabot"
},
{
"number": 146,
"created_at": "2026-07-29T02:33:53Z",
"last_comment_at": "2026-07-29T02:33:54Z",
"last_comment_author": "dependabot"
},
{
"number": 147,
"created_at": "2026-07-29T02:33:59Z",
"last_comment_at": "2026-07-29T02:33:59Z",
"last_comment_author": "dependabot"
},
{
"number": 148,
"created_at": "2026-07-29T02:34:30Z",
"last_comment_at": "2026-07-29T02:34:31Z",
"last_comment_author": "dependabot"
},
{
"number": 149,
"created_at": "2026-07-29T02:35:14Z",
"last_comment_at": "2026-07-29T02:35:15Z",
"last_comment_author": "dependabot"
},
{
"number": 150,
"created_at": "2026-07-29T02:35:54Z",
"last_comment_at": "2026-07-29T02:35:55Z",
"last_comment_author": "dependabot"
},
{
"number": 151,
"created_at": "2026-07-29T02:36:27Z",
"last_comment_at": "2026-07-29T02:36:28Z",
"last_comment_author": "dependabot"
}
],
"last_merged_pr_at": "2026-07-28T19:46:53Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/sebastienrousseau/bankstatementparser",
"host": "github.com",
"name": "bankstatementparser",
"owner": "sebastienrousseau"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 71 is calibrated to 84 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 71,
"calibrated": 84,
"calibration": "2026-08-02"
}
}
],
"value": 84,
"inputs": {
"security": 76,
"vitality": 79,
"community": 58,
"governance": 54,
"calibration": "2026-08-02",
"engineering": 90,
"ai_readiness": 61,
"weighted_overall_raw": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 79,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"commits_last_year": 154,
"human_commit_share": 0.8,
"days_since_last_push": 1,
"active_weeks_last_year": 11
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "11/52 weeks with commits",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 11
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "154 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 154
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 11,
"latest_release_tag": "v0.0.11",
"releases_from_tags": false,
"days_since_latest_release": 12,
"mean_days_between_releases": 13.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "11 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 11
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 12 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 12
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~13.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 13.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 17,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 17 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 17
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 58,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"forks": 8,
"stars": 38,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "38 stars",
"points": 25.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 38
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "8 forks",
"points": 7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 8
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 54,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"merged_prs": 41,
"open_issues": 0,
"closed_issues": 7,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 94,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "41/135 decided PRs merged",
"points": 9.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 41,
"decided": 135
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/6 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 63,
"inputs": {
"followers": 153,
"owner_type": "User",
"is_verified": null,
"owner_login": "sebastienrousseau",
"public_repos": 146,
"account_age_days": 5294
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "153 followers of sebastienrousseau",
"points": 15.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 153,
"login": "sebastienrousseau"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "146 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 146
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"bankstatementparser"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 12
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 12 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 12
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "8 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 8
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 90,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "6 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 6
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".pylintrc",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".pylintrc"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "exceptional",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"banking",
"camt",
"finance",
"iso20022",
"pain001",
"bank-statements",
"cli",
"csv",
"mt940",
"ofx",
"parser",
"categorization",
"deduplication",
"litellm",
"llm",
"ollama",
"pdf",
"fintech",
"rest-api",
"treasury"
],
"has_wiki": true,
"homepage": "http://docs.bankstatementparser.com/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://docs.bankstatementparser.com/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "20 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 20
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 76,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/6 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:bankstatementparser@0.0.11 runtime dependency closure — what installing the published package pulls in — 13 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:bankstatementparser@0.0.11",
"assessed": 13
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 13,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 13,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 61,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "80 of 80 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 80,
"sampled": 80
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 87,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"poetry.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [
"Makefile",
"mise.toml"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.08,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.2
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, mise.toml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, mise.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".pylintrc",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".pylintrc"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "8 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 8,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "20 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 20,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 52634,
"source_files_sampled": 107,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/107 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 107,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library",
"application"
],
"labels": [
"library",
"network-service",
"cli"
],
"scores": {
"cli": 4,
"library": 6,
"network-service": 4
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:pypi",
"weight": 6
},
{
"tier": "dependencies",
"label": "network-service",
"source": "dep:fastapi",
"weight": 4
},
{
"tier": "description",
"label": "cli",
"source": "description:cli",
"weight": 2
},
{
"tier": "tags",
"label": "cli",
"source": "tag:cli",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-31T00:30:52.739703Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sebastienrousseau/bankstatementparser.svg",
"full_name": "sebastienrousseau/bankstatementparser",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con sebastienrousseau/bankstatementparser. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v2.5.0, esquema v0.27.0 — metodología completa · wiki de métricas.
