Public record
Software health reportschema 0.34.0 · metrics 2.10.0 · 2026-10-08 15:44 UTC

Chia-Network / chia-blockchain

Chia blockchain python implementation (full node, farmer, harvester, timelord, and wallet)

PythonApache-2.0★ 10,791 stars⑂ 2,057 forkssince Jul 2019View on GitHub ↗
KindCommand-line toolDesktop applicationLibraryhow this is determined
#chia#blockchain#blockchain-network#proof-of-space#proof-of-time#vdf#farmer#timelord#full-node#harvesters#wallets#chia-blockchain#peer

Chia-Network/chia-blockchain holds a health index of 97 out of 100, placing it in the Exceptional band. It scores highest on Vitality (96/100) and lowest on Security (64/100). It was last updated today. 5 contributors account for most of its recent work.

97
overall / 100
Exceptional

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.

97
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

The weighted overall 85 is calibrated to 97 on the published index scale (record calibration 2026-08-02).

Ownership

Chia NetworkOrganization · verified domain
759 followers138 public repossince Nov 2017

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publishTags
PyPIchia-blockchain2.7.45,02624627 days agochiablockchainnode

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

96Exceptional · 21% of overall

Development activity

100Exceptional
How it's scored
36/36Push recency — last push 0 days ago
36/36Commit cadence — 52/52 weeks with commits
18/18Commit volume — 955 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year955
human_commit_share0.8
days_since_last_push0
active_weeks_last_year52

Release discipline

90Excellent
How it's scored
27/27Ships releases — 100 releases published
36/36Release recency — latest release 0 days ago
27/27Release cadence — a release every ~10.1 days
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Inputs used
releases_count100
latest_release_tag2.7.5-rc1
releases_from_tagsno
days_since_latest_release0
mean_days_between_releases10.1

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

87Excellent · 17% of overall

Popularity & adoption

99Exceptional
How it's scored
60/60Stars — 10,791 stars
25/25Forks — 2,057 forks
13.8/15Watchers — 302 watchers
Inputs used
forks2,057
stars10,791
watchers302
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community health

92Excellent
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (Apache-2.0)
18/18CONTRIBUTING guide
13.5/13.5Code of conduct
0/7.2Issue template
6.3/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
readme_badges0
has_contributingyes
has_issue_templateno
has_code_of_conductyes
readme_badge_services—
has_pull_request_templateyes

Ecosystem adoption (downloads)

62Moderate
How it's scored
49.4/80Monthly downloads — 5,026 downloads/month across pypi
0/20Registry dependents — not reported by this ecosystem
Inputs used
packageschia-blockchain
dependents—
ecosystemspypi
total_downloads—
monthly_downloads5,026
unverified_packages_excluded—
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

93Exceptional · 23% of overall

Maintainer resilience (bus factor)

88Excellent
How it's scored
45.9/54Bus factor — 5 contributor(s) cover half of all commits
18.5/22.5Commit distribution — top contributor authored 18% of commits
13.5/13.5Contributor breadth — 98 contributors
10/10OpenSSF Scorecard: Contributors — project has 19 contributing companies or organizations
Inputs used
bus_factor5
contributors_sampled98
top_contributor_share0.176

Issue & PR responsiveness

92Excellent
How it's scored
41.9/42Issue resolution — 100% of issues closed
23.1/30PR acceptance — 8,839/11,456 decided PRs merged
0/13Newcomer PR acceptance — no first-time contributor's PR decided in 30d
15/15OpenSSF Scorecard: Code-Review — all changesets reviewed
Inputs used
merged_prs8,839
open_issues17
closed_issues5,028
prs_merged_7d16
prs_decided_7d16
prs_merged_30d39
prs_decided_30d40
issue_closed_ratio0.997
closed_unmerged_prs2,617
first_time_authors_30d0
first_time_prs_merged_30d0
first_time_prs_decided_30d0
Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.

Ownership & stewardship

96Exceptional
How it's scored
30/30Ownership backing — organization-owned
20/20Verified domain
20.7/25Owner reach — 759 followers of Chia-Network
25/25Track record — 138 public repos, account ~8 yr old
Inputs used
followers759
owner_typeOrganization
is_verifiedyes
owner_loginChia-Network
public_repos138
account_age_days3,236

Package maintenance

100Exceptional
How it's scored
25/25Published & resolvable — 1 package(s) on pypi
35/35Publish recency — latest publish 27 days ago
20/20Version history — 246 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packageschia-blockchain
ecosystemspypi
any_deprecatedno
min_days_since_publish27

Engineering Quality

Are baseline engineering and documentation practices in place?

80Excellent · 19% of overall

Engineering practices

94Exceptional
How it's scored
24/24CI workflows — 26 workflow(s)
24/24Tests present
16/16Linter config — ruff.toml
9.6/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 24 out of 24 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configyes

Documentation

60Moderate
How it's scored
30/30README
0/25Documentation directory
0/15Documentation / homepage site
10/10Repository description
10/10Topics — 13 topics
10/10Wiki
Inputs used
topicschia, blockchain, blockchain-network, proof-of-space, proof-of-time, vdf, farmer, timelord, full-node, harvesters, wallets, chia-blockchain, peer
has_wikiyes
homepage—
docs_site—
has_readmeyes
has_docs_dirno
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

64Moderate · 16% of overall

Security posture

60Moderate
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0.8/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 24 out of 24 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
7.5/7.5Code-Review — all changesets reviewed
2.5/2.5Contributors — project has 19 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
4.5/5SAST — SAST tool detected but not run on all commits
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 24 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated18
scorecard_versionv5.5.0
checks_inconclusive0
scorecard_aggregate6

Dependency advisories

81Excellent
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
11.4/25Indirect dependencies free of known advisories — 1 affected: pytest 8.4.2 (moderate 6.8)
34.2/40No advisories left outstanding — 1 advisory-carrying package(s) unaddressed past 90 days; oldest published 259 days ago
Inputs used
sourceosv
advisories2
affected_packages1
assessed_packages72
unassessed_packages0
affected_by_severitymoderate 1
direct_affected_packages0
Matched the pypi:chia-blockchain@2.7.4 runtime dependency closure — what installing the published package pulls in — 72 packages. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.

78Good · 4% of overall

Agent context & guidance

85Excellent
How it's scored
45/45Agent instructions — .cursor/rules/context-apis.mdc, .cursor/rules/context-benchmarks.mdc, .cursor/rules/context-blockchain-gui.mdc, .cursor/rules/context-clvm.mdc, .cursor/rules/context-cmds.mdc, .cursor/rules/context-consensus.mdc, .cursor/rules/context-daemon.mdc, .cursor/rules/context-data-layer.mdc, .cursor/rules/context-farmer.mdc, .cursor/rules/context-full-node.mdc, .cursor/rules/context-harvester.mdc, .cursor/rules/context-introducer.mdc, .cursor/rules/context-mempool.mdc, .cursor/rules/context-plot-sync.mdc, .cursor/rules/context-plotting.mdc, .cursor/rules/context-pools.mdc, .cursor/rules/context-protocols.mdc, .cursor/rules/context-repo-tooling.mdc, .cursor/rules/context-routing.mdc, .cursor/rules/context-rpc.mdc, .cursor/rules/context-seeder.mdc, .cursor/rules/context-server.mdc, .cursor/rules/context-simulator.mdc, .cursor/rules/context-solver.mdc, .cursor/rules/context-ssl.mdc, .cursor/rules/context-timelord.mdc, .cursor/rules/context-types.mdc, .cursor/rules/context-util.mdc, .cursor/rules/context-wallet.mdc, .cursor/rules/testing-guide.mdc, .cursor/rules/use-venv-wrappers.mdc, AGENTS.md
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 67 of 80 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
llms_txt_url—
legible_history_share0.838
agent_instruction_files.cursor/rules/context-apis.mdc, .cursor/rules/context-benchmarks.mdc, .cursor/rules/context-blockchain-gui.mdc, .cursor/rules/context-clvm.mdc, .cursor/rules/context-cmds.mdc, .cursor/rules/context-consensus.mdc, .cursor/rules/context-daemon.mdc, .cursor/rules/context-data-layer.mdc, .cursor/rules/context-farmer.mdc, .cursor/rules/context-full-node.mdc, .cursor/rules/context-harvester.mdc, .cursor/rules/context-introducer.mdc, .cursor/rules/context-mempool.mdc, .cursor/rules/context-plot-sync.mdc, .cursor/rules/context-plotting.mdc, .cursor/rules/context-pools.mdc, .cursor/rules/context-protocols.mdc, .cursor/rules/context-repo-tooling.mdc, .cursor/rules/context-routing.mdc, .cursor/rules/context-rpc.mdc, .cursor/rules/context-seeder.mdc, .cursor/rules/context-server.mdc, .cursor/rules/context-simulator.mdc, .cursor/rules/context-solver.mdc, .cursor/rules/context-ssl.mdc, .cursor/rules/context-timelord.mdc, .cursor/rules/context-types.mdc, .cursor/rules/context-util.mdc, .cursor/rules/context-wallet.mdc, .cursor/rules/testing-guide.mdc, .cursor/rules/use-venv-wrappers.mdc, AGENTS.md
agent_instruction_max_bytes2,832

Verify loop (build / test / typecheck)

72Good
How it's scored
0/18One-command bootstrap
22/22Automated tests
11/11Lint / format config — ruff.toml
11/11Static type checking — chia/py.typed
10/10Reproducible environment — lockfile
10/10Demonstrated agent practice — 12 of the last 100 commits agent-authored or agent-credited
8/8Automated maintenance — 19 of the last 100 commits are automated dependency updates
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfilespackage-lock.json, poetry.lock
has_dockerfileno
typed_languageno
bootstrap_files—
has_devcontainerno
has_linter_configyes
typecheck_configschia/py.typed
agent_commit_share0.12
toolchain_manifests—
dependency_bot_commit_share0.19

Code legibility for models

80Excellent
How it's scored
27/45Type-checkable code — Python with type-check config (chia/py.typed)
53/55Manageable file sizes — 35/975 source files over 60KB
Inputs used
primary_languagePython
largest_source_bytes363,173
source_files_sampled975
oversized_source_files35

Key facts

10,791GitHub stars
98contributors
955commits, last 12 months
0days since last push
100releases
5bus factor
17open issues
PyPIpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

More detail

Star and fork history 0 ★ / 2,057 ⇿
0Stars
2,057Forks
99Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

Only the most recent history is shown — this repository exceeds the collection window, so the earliest history is not captured.

1,0001,2001,4001,6001,8002,0002,2002,057322021-062024-022026-10
Major 0Minor 5Patch 21

Each point covers 5 days.

OpenSSF Scorecard 6.0 / 10
6.0aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-10-08 15:43 UTC

10Binary-Artifactsno binaries found in the repo
1Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests24 out of 24 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
10Code-Reviewall changesets reviewed
10Contributorsproject has 19 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
9SASTSAST tool detected but not run on all commits
10Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities24 existing vulnerabilities detected
Direct dependencies 63
RegistryPackageVersion constraintManifest
PyPIaiofiles>=24.1.0pyproject.toml
PyPIaiohttp>=3.14.0pyproject.toml
PyPIaiosqlite>=0.20.0pyproject.toml
PyPIanyio>=4.6.2.post1pyproject.toml
PyPIbitstring>=4.1.4pyproject.toml
PyPIboto3>=1.43.8pyproject.toml
PyPIchiabip158>=1.5.2pyproject.toml
PyPIchiapos>=2.0.10pyproject.toml
PyPIchia-puzzles-py>=0.20.1pyproject.toml
PyPIchia_rs>=0.50.0, <0.51pyproject.toml
PyPIchiavdf>=1.1.10pyproject.toml
PyPIclick>=8.4.0pyproject.toml
PyPIclvm>=0.9.14pyproject.toml
PyPIclvm_tools>=0.4.9pyproject.toml
PyPIchialisp>=0.4.1pyproject.toml
PyPIcolorama>=0.4.6pyproject.toml
PyPIcolorlog>=6.9.0pyproject.toml
PyPIconcurrent_log_handler>=0.9.25pyproject.toml
PyPIcryptography—pyproject.toml
PyPIdnslib>=0.9.25pyproject.toml
PyPIdnspython>=2.6.1pyproject.toml
PyPIfilelock>=3.29.0pyproject.toml
PyPIkeyring>=25.5.0pyproject.toml
PyPIpackaging>=26.2pyproject.toml
PyPIpip>=26.1.1pyproject.toml
PyPIpsutil>=6.1.0pyproject.toml
PyPIpyyaml>=6.0.2pyproject.toml
PyPIsetproctitle>=1.3.3pyproject.toml
PyPIsetuptools>=75.5.0pyproject.toml
PyPIsortedcontainers>=2.4.0pyproject.toml
PyPItyping-extensions>=4.12.2pyproject.toml
PyPIwatchdog>=4.0.1pyproject.toml
PyPIzstd—pyproject.toml
PyPIimportlib-resources>=6.4.5pyproject.toml
PyPIhsms>=0.3.2pyproject.toml
PyPIaiohttp_cors>=0.7.0pyproject.toml
PyPIbuild>=1.5.0pyproject.toml
PyPIcoverage>=7.14.0pyproject.toml
PyPIdiff-cover>=9.2.0pyproject.toml
PyPIkeyrings.cryptfile>=1.3.9pyproject.toml
PyPImypy>=2.3.0pyproject.toml
PyPIpre-commit>=4.6.0pyproject.toml
PyPIpy3createtorrent>=1.2.1pyproject.toml
PyPIpyinstaller>=6.20.0pyproject.toml
PyPIpytest>=8.3.3pyproject.toml
PyPIpytest-cov>=5.0.0pyproject.toml
PyPIpytest-mock>=3.14.0pyproject.toml
PyPIpytest-monitor>=1.6.6pyproject.toml
PyPIpytest-xdist>=3.6.1pyproject.toml
PyPIpytest-rerunfailures>=16.1, <17.0pyproject.toml
PyPItach>=0.35.0pyproject.toml
PyPItypes-aiofiles>=25.1.0.20260508pyproject.toml
PyPItypes-pyyaml>=6.0.12.20260510pyproject.toml
PyPItypes-setuptools>=82.0.0.20260518pyproject.toml
PyPItypes-psutil>=7.2.2.20260518pyproject.toml
PyPItypes-lxml>=2026.2.16pyproject.toml
PyPItypes-zstd>=1.5.7.3.20260408pyproject.toml
PyPIboto3-stubs>=1.43.18pyproject.toml
PyPIsortedcontainers-stubs>= 2.4.3pyproject.toml
PyPItypes-colorama>=0.4.15.20260508pyproject.toml
PyPIlxml>=6.1.0pyproject.toml
PyPIminiupnpc>=2.3.2, <3pyproject.toml
PyPIruff>=0.16.7pyproject.toml
All dependencies 458

Full resolved dependency set from the GitHub dependency graph: 65 direct and 393 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
PyPIaiofiles25.1.0direct
PyPIaiohttp3.14.3direct
PyPIaiohttp-cors0.8.1direct
PyPIaiosqlite0.22.1direct
PyPIanyio4.15.1direct
PyPIbitstring—direct
PyPIbitstring4.4.0direct
PyPIboto31.43.95direct
PyPIboto3-stubs1.43.94direct
PyPIbuild1.6.1direct
PyPIchia-puzzles-py0.20.3direct
PyPIchia-rs0.50.0direct
PyPIchiabip1581.5.4direct
PyPIchialisp0.5.0direct
PyPIchiapos2.0.12direct
PyPIchiavdf1.1.14direct
PyPIclick8.5.0direct
PyPIclvm0.9.15direct
PyPIclvm-tools0.4.10direct
PyPIcolorama0.4.6direct
PyPIcolorlog6.12.0direct
PyPIconcurrent-log-handler0.9.29direct
PyPIcoverage7.16.1direct
PyPIcryptography50.0.1direct
PyPIdiff-cover10.5.1direct
PyPIdnslib0.9.26direct
PyPIdnspython2.8.0direct
PyPIfilelock3.32.6direct
PyPIhsms0.3.2direct
PyPIimportlib-resources7.1.0direct
PyPIkeyring25.7.0direct
PyPIkeyrings-cryptfile1.3.9direct
PyPIlxml6.1.3direct
PyPIminiupnpc2.3.3direct
PyPImypy2.3.1direct
PyPIpackaging26.3direct
PyPIpip26.2.1direct
PyPIpre-commit4.6.2direct
PyPIpsutil7.2.2direct
PyPIpy3createtorrent1.2.1direct
PyPIpyinstaller6.22.3direct
PyPIpytest—direct
PyPIpytest8.4.2direct
PyPIpytest-cov7.1.0direct
PyPIpytest-mock3.15.1direct
PyPIpytest-monitor1.6.6direct
PyPIpytest-rerunfailures16.6.1direct
PyPIpytest-xdist3.8.0direct
PyPIpyyaml6.0.3direct
PyPIruff0.16.8direct
PyPIsetproctitle1.3.7direct
PyPIsetuptools84.0.0direct
PyPIsortedcontainers2.4.0direct
PyPIsortedcontainers-stubs2.4.3direct
PyPItach0.35.1direct
PyPItypes-aiofiles25.1.0.20260518direct
PyPItypes-colorama0.4.15.20260508direct
PyPItypes-lxml2026.2.16direct
PyPItypes-psutil7.2.2.20260906direct
PyPItypes-pyyaml6.0.12.20260906direct
PyPItypes-setuptools84.0.0.20260812direct
PyPItypes-zstd1.5.7.3.20260722direct
PyPItyping-extensions4.16.0direct
PyPIwatchdog6.0.0direct
PyPIzstd1.5.7.2direct
npm@electron/asar3.4.1indirect
npm@electron/fuses1.8.0indirect
npm@electron/get3.1.0indirect
npm@electron/notarize2.5.0indirect
npm@electron/osx-sign1.3.3indirect
npm@electron/rebuild4.2.0indirect
npm@electron/universal2.0.3indirect
npm@electron/windows-sign1.2.2indirect
npm@isaacs/fs-minipass4.0.1indirect
npm@malept/cross-spawn-promise2.0.0indirect
npm@malept/flatpak-bundler0.4.0indirect
npm@noble/hashes1.4.0indirect
npm@noble/hashes2.2.0indirect
npm@peculiar/asn1-schema2.8.0indirect
npm@peculiar/json-schema1.1.12indirect
npm@peculiar/utils2.0.3indirect
npm@peculiar/webcrypto1.7.1indirect
npm@sindresorhus/is4.6.0indirect
npm@szmarczak/http-timer4.0.6indirect
npm@types/cacheable-request6.0.3indirect
npm@types/debug4.1.13indirect
npm@types/fs-extra9.0.13indirect
npm@types/http-cache-semantics4.2.0indirect
npm@types/keyv3.1.4indirect
npm@types/ms2.1.0indirect
npm@types/node18.7.6indirect
npm@types/node26.1.1indirect
npm@types/plist3.0.2indirect
npm@types/responselike1.0.3indirect
npm@types/verror1.10.6indirect
npm@xmldom/xmldom0.8.15indirect
npmabbrev4.0.0indirect
npmagent-base7.1.4indirect
npmajv6.14.0indirect
npmajv8.20.0indirect
npmansi-regex5.0.1indirect
npmansi-styles4.3.0indirect
npmapp-builder-lib26.15.6indirect
npmargparse2.0.1indirect
npmasn1js3.0.10indirect
npmassert-plus1.0.0indirect
npmastral-regex2.0.0indirect
npmasync3.2.6indirect
npmasync-exit-hook2.0.1indirect
npmasynckit0.4.0indirect
npmat-least-node1.0.0indirect
npmaws41.13.2indirect
npmbalanced-match1.0.2indirect
npmbalanced-match4.0.4indirect
npmbase64-js1.5.1indirect
npmbluebird3.7.2indirect
npmboolean3.2.0indirect
npmbrace-expansion1.1.18indirect
npmbrace-expansion2.1.4indirect
npmbrace-expansion5.0.9indirect
npmbuffer5.7.1indirect
npmbuffer-from1.1.2indirect
npmbuilder-util26.15.3indirect
npmbuilder-util-runtime9.7.0indirect
npmbytestreamjs2.0.1indirect
npmcacheable-lookup5.0.4indirect
npmcacheable-request7.0.4indirect
npmcall-bind-apply-helpers1.0.2indirect
npmchalk4.1.2indirect
npmchownr3.0.0indirect
npmchromium-pickle-js0.2.0indirect
npmci-info4.3.1indirect
npmci-info4.4.0indirect
npmcli-truncate2.1.0indirect
npmcliui8.0.1indirect
npmclone-response1.0.3indirect
npmcolor-convert2.0.1indirect
npmcolor-name1.1.4indirect
npmcombined-stream1.0.8indirect
npmcommander5.1.0indirect
npmcommander9.5.0indirect
npmcompare-version0.1.2indirect
npmconcat-map0.0.1indirect
npmcore-util-is1.0.2indirect
npmcore-util-is1.0.3indirect
npmcrc3.8.0indirect
npmcross-dirname0.1.0indirect
npmcross-spawn7.0.6indirect
npmdebug4.4.3indirect
npmdecompress-response6.0.0indirect
npmdefer-to-connect2.0.1indirect
npmdefine-data-property1.1.4indirect
npmdefine-properties1.2.1indirect
npmdelayed-stream1.0.0indirect
npmdetect-node2.1.0indirect
npmdir-compare4.2.0indirect
npmdmg-builder26.15.6indirect
npmdmg-license1.0.11indirect
npmdotenv16.6.1indirect
npmdotenv-expand11.0.7indirect
npmdunder-proto1.0.1indirect
npmduplexer20.1.4indirect
npmejs3.1.10indirect
npmelectron-builder26.15.6indirect
npmelectron-builder-squirrel-windows26.15.6indirect
npmelectron-osx-sign0.5.0indirect
npmelectron-publish26.15.3indirect
npmelectron-winstaller5.4.0indirect
npmemoji-regex8.0.0indirect
npmend-of-stream1.4.5indirect
npmenv-paths2.2.1indirect
npmerr-code2.0.3indirect
npmes-define-property1.0.1indirect
npmes-errors1.3.0indirect
npmes-object-atoms1.1.2indirect
npmes-set-tostringtag2.1.0indirect
npmes6-error4.1.1indirect
npmescalade3.2.0indirect
npmescape-string-regexp4.0.0indirect
npmexponential-backoff3.1.3indirect
npmextsprintf1.4.1indirect
npmfast-deep-equal3.1.3indirect
npmfast-json-stable-stringify2.1.0indirect
npmfast-uri3.1.7indirect
npmfdir6.5.0indirect
npmfilelist1.0.6indirect
npmform-data4.0.6indirect
npmfs-extra10.1.0indirect
npmfs-extra11.3.1indirect
npmfs-extra11.3.6indirect
npmfs-extra7.0.1indirect
npmfs-extra8.1.0indirect
npmfs-extra9.1.0indirect
npmfs.realpath1.0.0indirect
npmfunction-bind1.1.2indirect
npmget-caller-file2.0.5indirect
npmget-intrinsic1.3.0indirect
npmget-proto1.0.1indirect
npmget-stream5.2.0indirect
npmglob7.2.3indirect
npmglobal-agent3.0.0indirect
npmglobalthis1.0.4indirect
npmgopd1.2.0indirect
npmgot11.8.6indirect
npmgraceful-fs4.2.11indirect
npmhas-flag4.0.0indirect
npmhas-property-descriptors1.0.2indirect
npmhas-symbols1.1.0indirect
npmhas-tostringtag1.0.2indirect
npmhasown2.0.4indirect
npmhosted-git-info4.1.0indirect
npmhttp-cache-semantics4.2.0indirect
npmhttp-proxy-agent7.0.2indirect
npmhttp2-wrapper1.0.3indirect
npmhttps-proxy-agent7.0.6indirect
npmiconv-corefoundation1.1.7indirect
npmieee7541.2.1indirect
npminflight1.0.6indirect
npminherits2.0.4indirect
npmis-fullwidth-code-point3.0.0indirect
npmisarray1.0.0indirect
npmisbinaryfile4.0.10indirect
npmisbinaryfile5.0.7indirect
npmisexe2.0.0indirect
npmisexe3.1.5indirect
npmisexe4.0.0indirect
npmjake10.9.4indirect
npmjiti2.7.0indirect
npmjs-yaml4.3.2indirect
npmjson-buffer3.0.1indirect
npmjson-schema-traverse0.4.1indirect
npmjson-schema-traverse1.0.0indirect
npmjson-stringify-safe5.0.1indirect
npmjson52.2.3indirect
npmjsonfile4.0.0indirect
npmjsonfile6.2.1indirect
npmkeyv4.5.4indirect
npmlazy-val1.0.5indirect
npmlodash4.18.1indirect
npmlowercase-keys2.0.0indirect
npmlru-cache6.0.0indirect
npmmatcher3.0.0indirect
npmmath-intrinsics1.1.0indirect
npmmime2.6.0indirect
npmmime-db1.52.0indirect
npmmime-types2.1.35indirect
npmmimic-response1.0.1indirect
npmmimic-response3.1.0indirect
npmminimatch10.2.5indirect
npmminimatch3.1.5indirect
npmminimatch5.1.9indirect
npmminimatch9.0.9indirect
npmminimist1.2.8indirect
npmminipass7.1.3indirect
npmminizlib3.1.0indirect
npmmkdirp0.5.6indirect
npmms2.0.0indirect
npmms2.1.3indirect
npmnode-abi4.33.0indirect
npmnode-addon-api1.7.2indirect
npmnode-api-version0.2.1indirect
npmnode-gyp12.4.0indirect
npmnode-int640.4.0indirect
npmnopt9.0.0indirect
npmnormalize-url6.1.0indirect
npmobject-keys1.1.1indirect
npmonce1.4.0indirect
npmp-cancelable2.1.1indirect
npmp-limit3.1.0indirect
npmpath-is-absolute1.0.1indirect
npmpath-key3.1.1indirect
npmpe-library0.4.1indirect
npmpicocolors1.1.1indirect
npmpicomatch4.0.5indirect
npmpkijs3.4.0indirect
npmplist3.1.0indirect
npmpostject1.0.0-alpha.6indirect
npmproc-log6.1.0indirect
npmprocess-nextick-args2.0.1indirect
npmprogress2.0.3indirect
npmpromise-retry2.0.1indirect
npmproper-lockfile4.1.2indirect
npmpump3.0.4indirect
npmpunycode2.1.1indirect
npmpvtsutils1.3.6indirect
npmpvutils1.1.5indirect
npmquick-lru5.1.1indirect
npmread-binary-file-arch1.0.6indirect
npmreadable-stream2.3.8indirect
npmrequire-directory2.1.1indirect
npmrequire-from-string2.0.2indirect
npmresedit1.7.2indirect
npmresolve-alpn1.2.1indirect
npmresponselike2.0.1indirect
npmretry0.12.0indirect
npmrimraf2.6.3indirect
npmroarr2.15.4indirect
npmsafe-buffer5.1.2indirect
npmsanitize-filename1.6.4indirect
npmsax1.6.0indirect
npmsemver5.7.2indirect
npmsemver6.3.1indirect
npmsemver7.5.3indirect
npmsemver7.5.4indirect
npmsemver7.7.4indirect
npmsemver7.8.5indirect
npmsemver-compare1.0.0indirect
npmserialize-error7.0.1indirect
npmshebang-command2.0.0indirect
npmshebang-regex3.0.0indirect
npmsignal-exit3.0.7indirect
npmsimple-update-notifier2.0.0indirect
npmslice-ansi3.0.0indirect
npmsmart-buffer4.2.0indirect
npmsource-map0.6.1indirect
npmsource-map-support0.5.21indirect
npmsprintf-js1.1.3indirect
npmstat-mode1.0.0indirect
npmstring-width4.2.3indirect
npmstring_decoder1.1.1indirect
npmstrip-ansi6.0.1indirect
npmsumchecker3.0.1indirect
npmsupports-color7.2.0indirect
npmtar7.5.20indirect
npmtar7.5.22indirect
npmtemp0.9.4indirect
npmtemp-file3.4.0indirect
npmtiny-async-pool1.3.0indirect
npmtinyglobby0.2.17indirect
npmtmp0.2.7indirect
npmtmp-promise3.0.3indirect
npmtruncate-utf8-bytes1.0.2indirect
npmtslib2.8.1indirect
npmtype-fest0.13.1indirect
npmundici6.29.0indirect
npmundici-types8.3.0indirect
npmuniversalify0.1.2indirect
npmuniversalify2.0.1indirect
npmunzipper0.12.5indirect
npmuri-js4.4.1indirect
npmutf8-byte-length1.0.5indirect
npmutil-deprecate1.0.2indirect
npmverror1.10.1indirect
npmwebcrypto-core1.9.2indirect
npmwhich2.0.2indirect
npmwhich5.0.0indirect
npmwhich6.0.1indirect
npmwrap-ansi7.0.0indirect
npmwrappy1.0.2indirect
npmxmlbuilder15.1.1indirect
npmy18n5.0.8indirect
npmyallist4.0.0indirect
npmyallist5.0.0indirect
npmyargs17.7.3indirect
npmyargs-parser21.1.1indirect
npmyocto-queue0.1.0indirect
PyPIaiohappyeyeballs2.6.1indirect
PyPIaiosignal1.4.0indirect
PyPIaltgraph0.17.5indirect
PyPIargon2-cffi25.1.0indirect
PyPIargon2-cffi-bindings25.1.0indirect
PyPIast-serialize0.8.0indirect
PyPIasync-timeout5.0.1indirect
PyPIattrs25.4.0indirect
PyPIbackports-tarfile1.2.0indirect
PyPIbeautifulsoup44.14.3indirect
PyPIbencode-py4.0.0indirect
PyPIbitarray3.8.0indirect
PyPIbotocore1.43.101indirect
PyPIbotocore-stubs1.43.14indirect
PyPIcertifi2026.1.4indirect
PyPIcffi2.0.0indirect
PyPIcfgv3.5.0indirect
PyPIchardet5.2.0indirect
PyPIcharset-normalizer3.4.4indirect
PyPIchia-base0.1.7indirect
PyPIchialisp-loader0.1.2indirect
PyPIchialisp-puzzles0.1.1indirect
PyPIclvm-rs0.2.5indirect
PyPIclvm-tools-rs0.1.48indirect
PyPIcppimport—indirect
PyPIcssselect1.4.0indirect
PyPIdistlib0.4.0indirect
PyPIexceptiongroup1.3.1indirect
PyPIexecnet2.1.2indirect
PyPIflake8—indirect
PyPIfrozenlist1.8.0indirect
PyPIgitdb4.0.12indirect
PyPIgitpython3.1.59indirect
PyPIidentify2.6.16indirect
PyPIidna3.15indirect
PyPIimportlib-metadata8.7.1indirect
PyPIiniconfig2.3.0indirect
PyPIjaraco-classes3.4.0indirect
PyPIjaraco-context6.1.0indirect
PyPIjaraco-functools4.4.0indirect
PyPIjeepney0.9.0indirect
PyPIjinja23.1.6indirect
PyPIjmespath1.1.0indirect
PyPIlibrt0.15.0indirect
PyPImacholib1.16.4indirect
PyPImarkdown-it-py4.0.0indirect
PyPImarkupsafe3.0.3indirect
PyPImdurl0.1.2indirect
PyPImemory-profiler0.61.0indirect
PyPImore-itertools10.8.0indirect
PyPImultidict6.7.1indirect
PyPImypy-boto3-cloudformation1.43.0indirect
PyPImypy-boto3-dynamodb1.43.0indirect
PyPImypy-boto3-ec21.43.14indirect
PyPImypy-boto3-lambda1.43.0indirect
PyPImypy-boto3-rds1.43.0indirect
PyPImypy-boto3-s31.43.14indirect
PyPImypy-boto3-sqs1.43.0indirect
PyPImypy-extensions1.1.0indirect
PyPInetworkx3.4.2indirect
PyPInodeenv1.10.0indirect
PyPIpathspec1.0.4indirect
PyPIpefile2024.8.26indirect
PyPIplatformdirs4.5.1indirect
PyPIpluggy1.6.0indirect
PyPIpoetry2.4.3indirect
PyPIpoetry-dynamic-versioning—indirect
PyPIpoetry-plugin-export—indirect
PyPIportalocker3.2.0indirect
PyPIprompt-toolkit3.0.52indirect
PyPIpropcache0.4.1indirect
PyPIpycparser3.0indirect
PyPIpycryptodome3.23.0indirect
PyPIpydot4.0.1indirect
PyPIpygments2.20.0indirect
PyPIpyinstaller-hooks-contrib2026.7indirect
PyPIpyparsing3.3.2indirect
PyPIpyproject-hooks1.2.0indirect
PyPIpython-dateutil2.9.0.post0indirect
PyPIpywin32311indirect
PyPIpywin32-ctypes0.2.3indirect
PyPIrequests2.33.0indirect
PyPIrich14.3.2indirect
PyPIs3transfer0.19.0indirect
PyPIsecretstorage3.5.0indirect
PyPIsegno1.4.1indirect
PyPIsix1.17.0indirect
PyPIsmmap5.0.2indirect
PyPIsoupsieve2.8.4indirect
PyPItibs0.5.7indirect
PyPItomli2.4.0indirect
PyPItomli-w1.2.0indirect
PyPItypes-awscrt0.33.0indirect
PyPItypes-html5lib1.1.11.20260518indirect
PyPItypes-s3transfer0.16.0indirect
PyPItypes-webencodings0.5.0.20260408indirect
PyPIurllib32.7.0indirect
PyPIvirtualenv20.36.1indirect
PyPIwcwidth0.6.0indirect
PyPIwheel0.46.2indirect
PyPIyarl1.22.0indirect
PyPIzipp3.23.0indirect
Dependency advisories 1

Installing pypi:chia-blockchain@2.7.4 pulls in 72 packages, direct and transitive: 1 carry known advisories, of which 0 are direct dependencies.

PackageVersionRelationSeverityAdvisoriesFixed in
pytest8.4.2indirectmoderate29.0.3

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable

Feedback

Spotted something off in this report, or have thoughts to share? Wrong measurements, missed tooling, ideas, questions — anything is welcome. Every message is read and gets a response.

The message is kept through sign-in.

Related records

Inspected repositories sharing catalogue tags or ecosystems with Chia-Network/chia-blockchain. Read them side by side →

96hyperledger/fabric-gatewayGo, Node and Java client API for Hyperledger Fabric v2.4+Exceptional93Chia-Network/chia_rsRust crate & wheel with consensus codeExceptional92Chia-Network/clvm_rsRust implementation of clvmExcellent94celestiaorg/luminaWasm friendly Celestia light node implementation in RustExceptional93algorand/js-algorand-sdkThe official JavaScript SDK for Algorand.Exceptional98aws/jsiijsii allows code in any language to naturally interact with JavaScript classes. It is the technology that enables the AWS Cloud Development Kit to deliver polyglot libraries from a single codebase!Exceptional

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.10.0, schema v0.34.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics — PyPI.