Public recordCritical
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-28 14:37 UTC
hamcrest / PyHamcrest
Hamcrest matchers for Python
hamcrest/PyHamcrest holds a health index of 26 out of 100, placing it in the Critical band. It scores highest on Engineering Quality (78/100) and lowest on Security (18/100). It was last updated 166 days ago. 2 contributors account for most of its recent work.
26
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
26
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At risk ceiling of 49.
Ownership
HamcrestOrganization
43 followers7 public repossince Apr 2012
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| PyPI | PyHamcrest | 2.1.0 | 5,892,698 | 24 | 1009 days ago | hamcrestmatcherspyunittesttestingunitunittestunittesting |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
24
Development activity
16Critical
How it's scored
| 9.9/36 | Push recency — last push 166 days ago |
| 0.7/36 | Commit cadence — 1/52 weeks with commits |
| 5.4/18 | Commit volume — 3 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 3 |
| human_commit_share | 0.93 |
| days_since_last_push | 166 |
| active_weeks_last_year | 1 |
Release discipline
36At risk
How it's scored
| 27/27 | Ships releases — 10 releases published |
| 0/36 | Release recency — latest release 1,009 days ago |
| 5.4/27 | Release cadence — a release every ~403.4 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 10 |
| latest_release_tag | V2.1.0 |
| releases_from_tags | no |
| days_since_latest_release | 1,009 |
| mean_days_between_releases | 403.4 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
69
Popularity & adoption
72Good
How it's scored
| 47.1/60 | Stars — 805 stars |
| 17.2/25 | Forks — 117 forks |
| 7.5/15 | Watchers — 23 watchers |
Inputs used
| forks | 117 |
| stars | 805 |
| watchers | 23 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
44At risk
How it's scored
| 22.5/22.5 | README |
| 16.9/22.5 | License — license file present, not a recognized license |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
100Excellent
How it's scored
| 80/80 | Monthly downloads — 5,892,698 downloads/month across pypi |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | PyHamcrest |
| dependents | — |
| ecosystems | pypi |
| total_downloads | — |
| monthly_downloads | 5,892,698 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
66
Maintainer resilience (bus factor)
62Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 13/22.5 | Commit distribution — top contributor authored 42% of commits |
| 13.5/13.5 | Contributor breadth — 33 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 4 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 33 |
| top_contributor_share | 0.422 |
How it's scored
| 37.1/46.8 | Issue resolution — 79% of issues closed |
| 30.7/38.3 | PR acceptance — 143/178 decided PRs merged |
| 7.5/15 | OpenSSF Scorecard: Code-Review — Found 5/10 approved changesets -- score normalized to 5 |
Inputs used
| merged_prs | 143 |
| open_issues | 18 |
| closed_issues | 69 |
| issue_closed_ratio | 0.793 |
| closed_unmerged_prs | 35 |
Ownership & stewardship
60Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 11.8/25 | Owner reach — 43 followers of hamcrest |
| 18.6/25 | Track record — 7 public repos, account ~14 yr old |
Inputs used
| followers | 43 |
| owner_type | Organization |
| is_verified | — |
| owner_login | hamcrest |
| public_repos | 7 |
| account_age_days | 5,230 |
Package maintenance
69Moderate
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on pypi |
| 4/35 | Publish recency — latest publish 1,009 days ago |
| 20/20 | Version history — 24 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | PyHamcrest |
| ecosystems | pypi |
| any_deprecated | no |
| min_days_since_publish | 1,009 |
Engineering Quality
Are baseline engineering and documentation practices in place?
78
Engineering practices
76Good
How it's scored
| 24/24 | CI workflows — 2 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — tox.ini |
| 9.6/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 2/20 | OpenSSF Scorecard: CI-Tests — 1 out of 10 merged PRs checked by a CI test -- score normalized to 1 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | yes |
Documentation
80Good
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — http://hamcrest.org/ |
| 10/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | http://hamcrest.org/ |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
18
Security posture
18Critical
Jurisdiction risk alert
High-risk jurisdiction exposure detected
1 top contributor profilesRussiaSecurity and overall rating: At risk ceiling
Based on self-published public profile locations. This governance signal does not determine nationality, citizenship, intent, sanctions status, or individual trustworthiness.
How jurisdiction exposure is assessedHow it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 0.2/2.5 | CI-Tests — 1 out of 10 merged PRs checked by a CI test -- score normalized to 1 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 3.8/7.5 | Code-Review — Found 5/10 approved changesets -- score normalized to 5 |
| 2.5/2.5 | Contributors — project has 4 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | License — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 33 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3.5 |
| high_risk_jurisdiction_cap | 49 |
| high_risk_jurisdiction_multiplier | 50 |
| security_posture_after_multiplier | 18 |
| security_posture_before_jurisdiction | 35 |
Excluded from scoring (no data or not applicable): branch_protection, signed_releases. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier and gives Security posture an At risk ceiling of 49.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
56
Agent context & guidance
29Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 29.2/40 | Legible commit history — 51 of 93 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.548 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — doc/Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — tox.ini |
| 11/11 | Static type checking — src/hamcrest/py.typed |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | uv.lock |
| has_dockerfile | yes |
| typed_language | no |
| bootstrap_files | doc/Makefile |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | src/hamcrest/py.typed |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
How it's scored
| 27/45 | Type-checkable code — Python with type-check config (src/hamcrest/py.typed) |
| 55/55 | Manageable file sizes — 0/112 source files over 60KB |
Inputs used
| primary_language | Python |
| largest_source_bytes | 7,672 |
| source_files_sampled | 112 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
805GitHub stars
33contributors
3commits, last 12 months
166days since last push
10releases
2bus factor
18open issues
PyPIpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 117 ⇿
0Stars
117Forks
10Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 1Patch 0
Each point covers 14 days.
OpenSSF Scorecard 3.5 / 10
3.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 1 | CI-Tests | 1 out of 10 merged PRs checked by a CI test -- score normalized to 1 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 5 | Code-Review | Found 5/10 approved changesets -- score normalized to 5 |
| 10 | Contributors | project has 4 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 33 existing vulnerabilities detected |
All dependencies 0
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 988,
"has_wiki": false,
"homepage": "http://hamcrest.org/",
"languages": {
"Shell": 525,
"Python": 208692,
"Dockerfile": 1838
},
"pushed_at": "2026-02-12T14:23:26Z",
"created_at": "2010-12-24T02:55:56Z",
"owner_type": "Organization",
"updated_at": "2026-07-17T19:29:07Z",
"description": "Hamcrest matchers for Python",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": "http://hamcrest.org",
"name": "Hamcrest",
"type": "Organization",
"login": "hamcrest",
"company": null,
"location": null,
"followers": 43,
"avatar_url": "https://avatars.githubusercontent.com/u/1595737?v=4",
"created_at": "2012-04-01T15:50:16Z",
"is_verified": null,
"public_repos": 7,
"account_age_days": 5230
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "V2.1.0",
"kind": "other",
"published_at": "2023-10-22T15:51:05Z"
},
{
"tag": "V2.0.3",
"kind": "other",
"published_at": "2021-12-12T20:12:19Z"
},
{
"tag": "V2.0.2",
"kind": "other",
"published_at": "2020-03-02T14:39:59Z"
},
{
"tag": "V2.0.1",
"kind": "other",
"published_at": "2020-02-26T13:49:18Z"
},
{
"tag": "V2.0.0",
"kind": "other",
"published_at": "2020-01-16T15:47:50Z"
},
{
"tag": "V1.10.1",
"kind": "other",
"published_at": "2020-01-15T09:46:05Z"
},
{
"tag": "V1.10.0",
"kind": "other",
"published_at": "2020-01-07T16:54:14Z"
},
{
"tag": "V1.9.0",
"kind": "other",
"published_at": "2016-10-01T21:55:48Z"
},
{
"tag": "V1.8.0",
"kind": "other",
"published_at": "2013-11-12T20:25:11Z"
},
{
"tag": "1.8.0",
"kind": "minor",
"published_at": "2013-11-12T17:18:02Z"
}
],
"recent_commits": [
{
"oid": "517a75e09372ac6fb14de9e7856edf02d5df5ffc",
"body": "LGTM.",
"is_bot": false,
"headline": "MatchingInOrder and MatchInAnyOrder are generics (#269)",
"author_name": "Buck Evan",
"author_login": "bukzor",
"committed_at": "2026-02-12T14:23:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2fe22625f6a68ccd9ea504060a67160c2befe70",
"body": null,
"is_bot": false,
"headline": "improved typehinting for described_as (#268)",
"author_name": "Buck Evan",
"author_login": "bukzor",
"committed_at": "2026-02-12T13:50:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab5ceb3e90edb664f0c0b2410e084bf33a6d3d09",
"body": "….14 (#270)\n\n* use `asyncio.new_event_loop` in tests for compatibility with Python 3.14\n\n* create loop in asyncio.Future",
"is_bot": false,
"headline": "use `asyncio.new_event_loop` in tests for compatibility with Python 3…",
"author_name": "MeggyCal",
"author_login": "MeggyCal",
"committed_at": "2026-02-12T13:39:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "346d3f752fe267789684eed55f84bf5681b40dda",
"body": "Use SPDX license expression",
"is_bot": false,
"headline": "Merge pull request #259 from cdce8p/main",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-11-30T16:19:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "373ed31521d59b568e7fbaa5cc9c0843260e6e01",
"body": "ci: test packaging on PRs, too",
"is_bot": false,
"headline": "Merge pull request #262 from hamcrest/ci-release-check-on-pr",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-11-30T16:18:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "215af382f210a1c9f9b3e75b8c223bd2cf5522d9",
"body": null,
"is_bot": false,
"headline": "bump for CI",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-11-30T16:15:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afefa121ad634919fb5ce580049b983732738f47",
"body": null,
"is_bot": false,
"headline": "ci: test packaging on PRs, too",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-11-30T15:52:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f963a928f846e78991dbed111a076e4d172ba42a",
"body": null,
"is_bot": false,
"headline": "Include the license file too",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-11-30T15:33:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a97b5cce2313665bcc51d45b8d3d6d501557ce8a",
"body": null,
"is_bot": false,
"headline": "Use SPDX license expression",
"author_name": "Marc Mueller",
"author_login": "cdce8p",
"committed_at": "2024-11-17T18:47:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea26ddce300513f315b4c37c3abecd83c0ea011f",
"body": "Actions security",
"is_bot": false,
"headline": "Merge pull request #258 from offbyone/actions-speed",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-11-02T22:03:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e781a467f16387412cb2087ff48dc746dfd394a8",
"body": null,
"is_bot": false,
"headline": "security: don't persist git credentials in checkout",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-11-02T21:47:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e66e128c6f30bcda492ade685a218381bb2558f",
"body": "No need to pin importlib_resource any more",
"is_bot": false,
"headline": "Merge pull request #256 from offbyone/fix-236",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T21:12:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03a1ba7d2cca2214945a9cf8612b97b06799fbbf",
"body": "Remove the redundant publish token",
"is_bot": false,
"headline": "Merge pull request #255 from offbyone/no-token-for-oidc-men",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T21:12:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecdf4f91c71b7a0fbd54432155bf63a18119b843",
"body": "Fixes #236",
"is_bot": false,
"headline": "No need to pin importlib_resource any more",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T21:02:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c356382f175db3ac106c01751b006649c49827e4",
"body": "Fix typing for commonly used callables",
"is_bot": false,
"headline": "Merge pull request #253 from kalfa/fix_typing",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T21:00:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95604e799d728458cd66e437eb5e053b8499e343",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main' into fix_typing",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T20:56:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85ac44da9b011e1bfe40f08ef4d521f636999a96",
"body": "PyHamcrest uses GitHub's OIDC provider",
"is_bot": false,
"headline": "Remove the redundant publish token",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T20:49:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "432c410efc90ca2c30330b811e613046751f4443",
"body": "A general CI refresh\n\n- tox-gh fixed to correctly select environments\n- switch to ruff / uv for CI speed",
"is_bot": false,
"headline": "Merge pull request #254 from offbyone/ci-refresh",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T20:49:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3eedf1a427666f25f16b38f44c30ec7c17ebfb34",
"body": null,
"is_bot": false,
"headline": "Remove the debugging of coverage downloads",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T20:43:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c53b1ae00e54f3439d0934a2dceef4400077dfc2",
"body": null,
"is_bot": false,
"headline": "Fix pypy 3.9 tox key",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T20:35:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54edb03c1861db7e7c6246cd912a4c1281e743a1",
"body": null,
"is_bot": false,
"headline": "Force tox-gh selection",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T20:33:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87fbd03b926d4a60aadcda2f126b28f24e4040ee",
"body": null,
"is_bot": false,
"headline": "Debug: why are we not getting coverage?",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T20:30:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c960d9b93620320d32940ce936b969abff624d7",
"body": "\":\" != \"=\"",
"is_bot": false,
"headline": "Fix the tox-gh configuration",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T20:22:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f37dbcfad7fc3c91a7bdf92e239884af16ab9975",
"body": null,
"is_bot": false,
"headline": "Attempt to get tox-gh working",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T16:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "851bd6c2ecc3d7dff0e813c69560bf25a2433c7a",
"body": null,
"is_bot": false,
"headline": "Add uv.lock for caching",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T14:52:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e9da470ad82047f93c3492a54e275a107f2471b",
"body": null,
"is_bot": false,
"headline": "uv-ify the CI",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T14:52:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9151aa6b1d6f222ee4ac3247bad38f01c7c9122a",
"body": "`uvx --with tox-uv tox` now works :)",
"is_bot": false,
"headline": "ci: generalized tox cleanup",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T14:35:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5dd07026d1575b4cf60d5b9a87a5c3af722fe91",
"body": null,
"is_bot": false,
"headline": "lint: apply ruff linting",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T14:19:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02fdba403cc2d958a53eea07e2f7a13cab362459",
"body": null,
"is_bot": false,
"headline": "lint: Switch to ruff for linting.",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T14:18:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a1e8ed37e04842790767e26b4c268eaa6632c19",
"body": "for more information, see https://pre-commit.ci",
"is_bot": true,
"headline": "[pre-commit.ci] auto fixes from pre-commit.com hooks",
"author_name": "pre-commit-ci[bot]",
"author_login": "pre-commit-ci[bot]",
"committed_at": "2024-09-26T08:23:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85d3012b30d3169add49009755cb323d27446f04",
"body": "to help mypy/pyright linting",
"is_bot": false,
"headline": "Add typing for raises, with_args instance_of",
"author_name": "Cosimo Alfarano",
"author_login": null,
"committed_at": "2024-09-26T08:19:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "946d57046298b94944c65c893d95ab4159cc0aa0",
"body": "It's nicer to see all the various causes, so it's clear if an issue is\nlocalized or universal",
"is_bot": false,
"headline": "ci: Don't fail fast on tests",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-09-26T07:31:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36ef18d2c8390b531a96d99f87a15b59b7af156d",
"body": "* Try to fix coverage data upload not working by including hidden files.\r\n\r\nAlso update all github actions to see if that helps.\r\n\r\n* Merge coverage data.\r\n\r\n* Don't merge coverage data - just download them all.",
"is_bot": false,
"headline": "Fix coverage data upload & download (#252)",
"author_name": "Simon Brunning",
"author_login": "brunns",
"committed_at": "2024-09-13T06:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17210814971acf3864c1f96904798964eb141fb7",
"body": "Mypy 1.11.0 is breaking the build, so pinning 1.10.1 for now.",
"is_bot": false,
"headline": "Merge pull request #250 from brunns/build/mypy-1.11-breaks-build",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-07-23T07:30:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa529fb5b1b642ea79eb0c0339658d27f1f04243",
"body": null,
"is_bot": false,
"headline": "Mypy 1.11.0 is breaking the build, so pinning 1.10.1 for now.",
"author_name": "Simon Brunning",
"author_login": "brunns",
"committed_at": "2024-07-23T07:23:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "498ea96904076affc658ba606cc123ef52c3b096",
"body": "Remove obsolete numpy shorthand types which were removed in numpy 2.0",
"is_bot": false,
"headline": "Merge pull request #248 from brunns/remove-obsolete-numpy-shorthands",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-06-18T15:16:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b45547101b82d1c8fc126c7425c5a532f683766e",
"body": null,
"is_bot": false,
"headline": "Remove obsolete numpy shorthand types which were removed in numpy 2.0",
"author_name": "Simon Brunning",
"author_login": "brunns",
"committed_at": "2024-06-18T14:45:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "981494898325c4b237d0e631ecf25b87112d71fb",
"body": "…thon-package-to-v2\n\nUpdate hynek/build-and-inspect-python-package to fix the build",
"is_bot": false,
"headline": "Merge pull request #246 from brunns/update-hynek-build-and-inspect-py…",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2024-04-15T14:16:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "933bd84d0f57415c17fb1832e1dece326982ffd9",
"body": "…e build.",
"is_bot": false,
"headline": "Update hynek/build-and-inspect-python-package to see if that fixes th…",
"author_name": "Simon Brunning",
"author_login": "brunns",
"committed_at": "2024-04-15T10:44:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "404475fe687010bd7b775330939f7ec7ec27b26f",
"body": null,
"is_bot": false,
"headline": "Bump Sphinx to V5 to fix build.",
"author_name": "Simon Brunning",
"author_login": "brunns",
"committed_at": "2024-01-18T10:45:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2b1c0c196842865631e6d03641f08839542638e",
"body": "updates:\n- [github.com/PyCQA/flake8: 6.1.0 → 7.0.0](https://github.com/PyCQA/flake8/compare/6.1.0...7.0.0)\n- [github.com/psf/black: 23.10.1 → 23.12.1](https://github.com/psf/black/compare/23.10.1...23.12.1)",
"is_bot": true,
"headline": "[pre-commit.ci] pre-commit autoupdate",
"author_name": "pre-commit-ci[bot]",
"author_login": "pre-commit-ci[bot]",
"committed_at": "2024-01-09T08:18:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ff4e91c1a10d39d4982a9ee70283a6a74776eb1",
"body": "Drop Python 3.7 support, since tests are failing, and add full 3.12 support.",
"is_bot": false,
"headline": "Merge pull request #242 from brunns/remove-py37-add-312",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-11-27T19:46:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ab6395fc18b65a65ad42341f58ca044e4678373",
"body": "…upport.",
"is_bot": false,
"headline": "Drop Python 3.7 support, since tests are failing, and add full 3.12 s…",
"author_name": "Simon Brunning",
"author_login": "brunns",
"committed_at": "2023-11-27T13:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b548748a2fe0cc39b74f513370c77b143aa50c10",
"body": "[pre-commit.ci] pre-commit autoupdate",
"is_bot": false,
"headline": "Merge pull request #233 from hamcrest/pre-commit-ci-update-config",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-10-23T21:48:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "415b3aa461d5ee5c2e9539755977e5480dfef6ea",
"body": "updates:\n- [github.com/pre-commit/pre-commit-hooks: v4.4.0 → v4.5.0](https://github.com/pre-commit/pre-commit-hooks/compare/v4.4.0...v4.5.0)\n- [github.com/asottile/blacken-docs: 1.13.0 → 1.16.0](https://github.com/asottile/blacken-docs/compare/1.13.0...1.16.0)\n- [github.com/PyCQA/flake8: 6.0.0 → 6.1.0](https://github.com/PyCQA/flake8/compare/6.0.0...6.1.0)\n- [github.com/psf/black: 23.3.0 → 23.10.1](https://github.com/psf/black/compare/23.3.0...23.10.1)",
"is_bot": true,
"headline": "[pre-commit.ci] pre-commit autoupdate",
"author_name": "pre-commit-ci[bot]",
"author_login": "pre-commit-ci[bot]",
"committed_at": "2023-10-23T21:43:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dede7a338d9bb9a3fa21ddd5958b8c64a6df3282",
"body": null,
"is_bot": false,
"headline": "release: fixed the github action downloader",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-10-22T15:43:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e692b828614f1dfe22130d8b201d107ea09fe395",
"body": null,
"is_bot": false,
"headline": "Changelog for 2.1.0",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-10-22T15:39:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a80f2387e0e5533a9cd7799ded61489216f2c45",
"body": null,
"is_bot": false,
"headline": "Add a changelog file for the async features change",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-10-22T15:36:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03910baa8166dac037333e6f20aa168664c79eb2",
"body": null,
"is_bot": false,
"headline": "Fix version file template",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-10-22T15:30:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f160f83762e011af93194c38e84be9d91012fe9",
"body": "…unctions\n\nRefactor the docs to promote user functions",
"is_bot": false,
"headline": "Merge pull request #239 from robyoung/refactor-docs-to-promote-user-f…",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-08-30T20:27:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2eddd436b1414a199692c3128c19b47ae5205be3",
"body": null,
"is_bot": false,
"headline": "Cross link from matcher library docs to internals",
"author_name": "Rob Young",
"author_login": "robyoung",
"committed_at": "2023-08-30T10:35:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f4cfb950dd855a071fe6cffadd747d31309b218",
"body": null,
"is_bot": false,
"headline": "Add section for matcher internals",
"author_name": "Rob Young",
"author_login": "robyoung",
"committed_at": "2023-08-30T09:03:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecdf5d872861a07f66e5ac901138bb568ecb7840",
"body": "The functions that users most often use are the matcher functions,\nhowever the docs show the internal matcher classes first. This means\nthat users have to scan through a bunch of internal detail to get to the\ndocumentation they're most likely interested in. This change switches\nthings around to just document the actual matcher functions.",
"is_bot": false,
"headline": "Refactor the docs to promote user functions",
"author_name": "Rob Young",
"author_login": "robyoung",
"committed_at": "2023-08-29T07:58:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58254caf1bba9a9489cfda3a95299c85278457e0",
"body": "Test with release candidate of Python 3.12",
"is_bot": false,
"headline": "Merge pull request #238 from brunns/python-3.12-rc",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-08-22T22:57:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a1b61f477541b0554955ffb9bc490a536a3aeff",
"body": null,
"is_bot": false,
"headline": "Test with release candidate of Python 3.21",
"author_name": "Simon Brunning",
"author_login": "brunns",
"committed_at": "2023-08-22T11:01:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84fc3281381e10f6ef0f59e8022c453aaf910c6a",
"body": "Workaround for towncrier breakage",
"is_bot": false,
"headline": "Merge pull request #237 from brunns/236-workaround",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-08-02T14:48:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a31704d8ac47e8a53701b02b4492ff78f90d1269",
"body": "Workaround for #236.",
"is_bot": false,
"headline": "Workaround for towncrier breakage",
"author_name": "Simon Brunning",
"author_login": "brunns",
"committed_at": "2023-08-02T10:12:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba2590cabae986cc8c42218405e8ae789566ce77",
"body": "Workaround for #236.",
"is_bot": false,
"headline": "Workaround for towncrier breakage",
"author_name": "Simon Brunning",
"author_login": "brunns",
"committed_at": "2023-08-02T10:12:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "587c0b51436d4efd28ebc5a75b1839e684972965",
"body": "Tidy up some builds",
"is_bot": false,
"headline": "Merge pull request #232 from offbyone/tidy-up-some-builds",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-05-31T18:40:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16b90bb4ede5e61941367b5ff1e016fea43b3694",
"body": null,
"is_bot": false,
"headline": "Clean up some dead interpreters in tox",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-05-31T18:25:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81b94ae65f7a1f1c5bc88b1a8a1008cc410edb2a",
"body": null,
"is_bot": false,
"headline": "Revisit read-the-docs' configuration to modernize it",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-05-31T18:25:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "727707702829a7fb5c47efb386118e59169f26aa",
"body": "- drop 3.7 from testing\n- make 3.11 the default\n- test 3.12 alpha",
"is_bot": false,
"headline": "Bump python in tests",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-04-24T23:57:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28251bb9099ace7206009e29fb4ab06b7cc296fe",
"body": null,
"is_bot": false,
"headline": "Spelling: dash, underscore... SO MANY WAYS TO FAIL",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-04-24T20:49:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8c760ede5274245d11c7c1db932fb4b6e2b28d6",
"body": "Experiment: add trusted publisher",
"is_bot": false,
"headline": "Merge pull request #229 from offbyone/add-trusted-publisher",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-04-24T20:32:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e169526712426cce7b876e4c9de28fa884d4aa2",
"body": "For pypi releases to work pre-tagging, we need to tell hatch not to\ngenerate local versions that are unsupported by PyPi",
"is_bot": false,
"headline": "Don't use local versions",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-04-24T20:21:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18c09f12d7361993c1eb57fb8dc92e2e725c595d",
"body": null,
"is_bot": false,
"headline": "Experiment: add trusted publisher",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-04-24T20:16:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63212eb5aee4967de528f24c6238c2cd6db97ba0",
"body": "[pre-commit.ci] pre-commit autoupdate",
"is_bot": false,
"headline": "Merge pull request #223 from hamcrest/pre-commit-ci-update-config",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-04-04T14:43:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb8795583b6818d1890de2f28a44feb6e74efd6d",
"body": "for more information, see https://pre-commit.ci",
"is_bot": true,
"headline": "[pre-commit.ci] auto fixes from pre-commit.com hooks",
"author_name": "pre-commit-ci[bot]",
"author_login": "pre-commit-ci[bot]",
"committed_at": "2023-04-04T09:28:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb1656fca16092caa7fb95308fed81d29a9ecb66",
"body": "updates:\n- [github.com/pre-commit/pre-commit-hooks: v4.3.0 → v4.4.0](https://github.com/pre-commit/pre-commit-hooks/compare/v4.3.0...v4.4.0)\n- [github.com/asottile/blacken-docs: v1.12.1 → 1.13.0](https://github.com/asottile/blacken-docs/compare/v1.12.1...1.13.0)\n- [github.com/PyCQA/flake8: 5.0.4 → 6.0.0](https://github.com/PyCQA/flake8/compare/5.0.4...6.0.0)\n- [github.com/psf/black: 22.10.0 → 23.3.0](https://github.com/psf/black/compare/22.10.0...23.3.0)",
"is_bot": true,
"headline": "[pre-commit.ci] pre-commit autoupdate",
"author_name": "pre-commit-ci[bot]",
"author_login": "pre-commit-ci[bot]",
"committed_at": "2023-04-04T09:28:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db767cf89bef873adb83993d7618f65f2d90b7df",
"body": "Add matcher for exceptions in asyncio future",
"is_bot": false,
"headline": "Merge pull request #171 from keis/future",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-02-15T18:37:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08ad89f8891016d3de57894ce01de9d01b891cfd",
"body": "Example of use\n\n```\nassert_that(\n await resolved(raise_exception()),\n future_raising(AssertionError))\n)\n```\n\nThe resolved helper is used to create resolved future objects in async\ncode. It takes a \"future like\" object and waits for it to complete.\n\nRef #155",
"is_bot": false,
"headline": "Add matcher for exceptions in asyncio future",
"author_name": "David Keijser",
"author_login": "keis",
"committed_at": "2023-02-14T18:27:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40e15f92a72516be4d710f76640ccfb21a018810",
"body": null,
"is_bot": false,
"headline": "Bump the checkout and upload-artifact actions to v3",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-01-03T16:40:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97026b2ef4bbc530d4057b1ebcfd457a23e13886",
"body": "* Compensates for changes in nedbat/coveragepy#1407\n* Fixes #225",
"is_bot": false,
"headline": "Tighten up wildcards in coverage paths",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-01-03T16:33:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bdc43e2ca1449e652a6c14d3709490ccb809175",
"body": null,
"is_bot": false,
"headline": "CI: remove a redundant Python setup step",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2023-01-03T16:33:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55c86280df80437f185eab6ab43fcb5fde5f3f06",
"body": "Add explicit installation instruction example",
"is_bot": false,
"headline": "Merge pull request #224 from rgalanakis/patch-1",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-12-14T19:41:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a32cc02b3b271efb77a6ecd1f3c47f940c5753d",
"body": "The package name is not clear- it's installed `PyHamcrest` but imported as `hamcrest`. There's no consistency in the Python world on this, so we may as well have an explicit example in the instructions showing the package installation name.",
"is_bot": false,
"headline": "Add explicit installation instruction example",
"author_name": "Rob Galanakis",
"author_login": "rgalanakis",
"committed_at": "2022-12-14T17:08:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c36b7548ea38de5c98a1da4f22b9a17580e6901",
"body": "Fix breakages due to Mypy chages",
"is_bot": false,
"headline": "Merge pull request #221 from brunns/220-fix-broken-build",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-11-14T16:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fead6c897e448d5aa56c41cbf26959857164904",
"body": null,
"is_bot": false,
"headline": "Drop 3.6 testing.",
"author_name": "Simon Brunning",
"author_login": "brunns",
"committed_at": "2022-11-14T09:19:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8776b27107333357cdabdcc0f2284f5e2b58805d",
"body": "…essages have changed somewhat, which breaks our build. I've changed some tests to reflect the changes.\n\nOne useful thing, too - the new mypy pointed out an unannotated function, albeit an internal one.",
"is_bot": false,
"headline": "Mypy 0.990 has been released, and it appears that some of the error m…",
"author_name": "Simon Brunning",
"author_login": "brunns",
"committed_at": "2022-11-14T09:08:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4b0ca7f4a15a68779e743061fbc01151ec22b9e",
"body": "[pre-commit.ci] pre-commit autoupdate",
"is_bot": false,
"headline": "Merge pull request #219 from hamcrest/pre-commit-ci-update-config",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-10-11T03:04:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8280a44998a4ed5d02557874ef01b286ab326b17",
"body": "updates:\n- [github.com/psf/black: 22.6.0 → 22.10.0](https://github.com/psf/black/compare/22.6.0...22.10.0)",
"is_bot": true,
"headline": "[pre-commit.ci] pre-commit autoupdate",
"author_name": "pre-commit-ci[bot]",
"author_login": "pre-commit-ci[bot]",
"committed_at": "2022-10-11T02:19:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ccad121bccd576ecd212efb44109d697024fbf9",
"body": null,
"is_bot": false,
"headline": "deprecated numpy alias",
"author_name": "aekoroglu",
"author_login": null,
"committed_at": "2022-09-05T13:57:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5504e792f3ddb65e4cf8961df4076209c3984c06",
"body": null,
"is_bot": false,
"headline": "Use build-and-inspect-python to verify the dist",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-20T19:37:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41fac8c3bc727c0bdaa0d1b037783b759238c193",
"body": "Fixes #182",
"is_bot": false,
"headline": "nit: fix a minor type annotation bug in isdict_containingentries",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-13T12:57:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07a787207619a7f7d51088d36051a632432a0144",
"body": "[pre-commit.ci] pre-commit autoupdate",
"is_bot": false,
"headline": "Merge pull request #208 from hamcrest/pre-commit-ci-update-config",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-09T00:51:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d0e594187d47d9ffbe0a6512039b5626a9c727b",
"body": "updates:\n- [github.com/PyCQA/flake8: 4.0.1 → 5.0.4](https://github.com/PyCQA/flake8/compare/4.0.1...5.0.4)",
"is_bot": true,
"headline": "[pre-commit.ci] pre-commit autoupdate",
"author_name": "pre-commit-ci[bot]",
"author_login": "pre-commit-ci[bot]",
"committed_at": "2022-08-09T00:32:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f90b396994126219612d7593d96325ba7c39c632",
"body": null,
"is_bot": false,
"headline": "dev: made the release script use hatch/towncrier",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-07T15:54:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89658b01ae5e6e6be4ebd7d77c80eed1de46bd5c",
"body": null,
"is_bot": false,
"headline": "Changelog for v2.0.4",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-07T15:44:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "592cf4e8d2166b4d3a6fc001bf1fd195dae23d17",
"body": "Release on tag",
"is_bot": false,
"headline": "Merge pull request #213 from offbyone/release-on-tag",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-07T15:28:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad275671860aa89706aff21c60d33b8115e07970",
"body": null,
"is_bot": false,
"headline": "ci: switch to the production PyPi endpoint",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-07T15:14:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c950886bc2e6a70df941991f60211ec7ca21ce47",
"body": null,
"is_bot": false,
"headline": "ci: allow workflow dispatch to trigger release",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-07T15:09:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3b5a81f8200c22f21d07cb5625ef8d89fef6562",
"body": "Add a release workflow based on tags",
"is_bot": false,
"headline": "Merge pull request #212 from offbyone/release-by-ci",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-07T15:00:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d8615e36ce5abfb3a4d035a7ea311bb3b310e4c",
"body": "Fix typo, emtpy -> empty",
"is_bot": false,
"headline": "Merge pull request #211 from kianmeng/fix-typos",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-07T14:56:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e04650b302bc8cff8aa7ee28bcfc51668d77e98f",
"body": "Depends on hatch-scm to perform the versioning\n\n* runs full suite of tests\n* releases the current tag\n\nOnly set up for test PyPi right now; once this is verified working,\nwe'll switch to release PyPi",
"is_bot": false,
"headline": "Add a release workflow based on tags",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-07T14:53:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8307bbf63748f4c7a9c7e0a97c125e8cd7952f6c",
"body": null,
"is_bot": false,
"headline": "Fix typo, emtpy -> empty",
"author_name": "Kian-Meng Ang",
"author_login": "kianmeng",
"committed_at": "2022-08-07T11:01:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "046e22594914fc1dc9330636da55a93f0e8835b7",
"body": "Switch from setuptools to hatch",
"is_bot": false,
"headline": "Merge pull request #210 from offbyone/hatch",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-06T23:08:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c81a386f26119554d2135949f34d644e322cab4",
"body": null,
"is_bot": false,
"headline": "add hatch-vcs for versioning",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-06T22:12:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "648e52d26421b665a964e69bb5808352490d184b",
"body": "I've switched our build to use [Hatch](https://hatch.pypa.io) for\nwheel/sdist creation. This removes `setup.py` and moves us to entirely\ndeclarative project metadata.\n\nNext steps:\n* publish using hatch\n* add CI publication on tags\n* possibly get our version metadata from VCS",
"is_bot": false,
"headline": "dev: switch to hatch to build hamcrest",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-06T16:53:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2177fe8330c3608476bccddfc309c13c7b04440",
"body": "Address #207 by using `Matcher[Any]`",
"is_bot": false,
"headline": "Merge pull request #209 from offbyone/fix-iterator-types",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-06T15:40:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a96f7a79a342abb2328a72885eb0b21e1b20823",
"body": "fixes #207\n\n`Matcher[object]` is too tight of a bound on the output type; what we're\nasserting is that a matcher for `Any` type is what `has_properties` will\ndo",
"is_bot": false,
"headline": "fix: provide correct type bounds on sequence matchers",
"author_name": "Chris Rose",
"author_login": "offbyone",
"committed_at": "2022-08-06T15:25:23Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 10,
"commits_last_year": 3,
"latest_release_at": "2023-10-22T15:51:05Z",
"latest_release_tag": "V2.1.0",
"releases_from_tags": false,
"days_since_last_push": 166,
"active_weeks_last_year": 1,
"days_since_latest_release": 1009,
"mean_days_between_releases": 403.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "PyHamcrest",
"exists": true,
"license": null,
"keywords": [
"hamcrest",
"matchers",
"pyunit",
"test",
"testing",
"unit",
"unittest",
"unittesting",
"Development Status :: 5 - Production/Stable",
"Environment :: Console",
"Intended Audience :: Developers",
"License :: OSI Approved :: BSD License",
"Natural Language :: English",
"Operating System :: OS Independent",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.6",
"Programming Language :: Python :: 3.7",
"Programming Language :: Python :: 3.8",
"Programming Language :: Python :: 3.9",
"Programming Language :: Python :: Implementation :: CPython",
"Programming Language :: Python :: Implementation :: Jython",
"Programming Language :: Python :: Implementation :: PyPy",
"Topic :: Software Development",
"Topic :: Software Development :: Quality Assurance",
"Topic :: Software Development :: Testing"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/PyHamcrest/",
"is_deprecated": false,
"latest_version": "2.1.0",
"repository_url": "https://github.com/hamcrest/PyHamcrest/",
"versions_count": 24,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 5892698,
"first_published_at": "2010-12-04T20:18:32.371765Z",
"latest_published_at": "2023-10-22T15:47:28.255462Z",
"latest_version_yanked": null,
"days_since_latest_publish": 1009
}
]
},
"popularity": {
"forks": 117,
"stars": 805,
"watchers": 23,
"fork_history": {
"days": [
{
"date": "2011-07-05",
"count": 1
},
{
"date": "2012-04-02",
"count": 1
},
{
"date": "2012-07-30",
"count": 1
},
{
"date": "2013-01-09",
"count": 1
},
{
"date": "2013-02-18",
"count": 1
},
{
"date": "2013-03-04",
"count": 1
},
{
"date": "2013-05-03",
"count": 1
},
{
"date": "2013-06-17",
"count": 1
},
{
"date": "2013-07-08",
"count": 1
},
{
"date": "2013-09-17",
"count": 1
},
{
"date": "2014-01-15",
"count": 1
},
{
"date": "2014-07-29",
"count": 1
},
{
"date": "2014-08-23",
"count": 1
},
{
"date": "2014-10-10",
"count": 1
},
{
"date": "2014-10-30",
"count": 1
},
{
"date": "2014-12-26",
"count": 1
},
{
"date": "2015-02-23",
"count": 1
},
{
"date": "2015-03-26",
"count": 1
},
{
"date": "2015-04-30",
"count": 1
},
{
"date": "2015-05-11",
"count": 1
},
{
"date": "2015-06-23",
"count": 1
},
{
"date": "2015-07-29",
"count": 1
},
{
"date": "2015-09-15",
"count": 1
},
{
"date": "2016-06-30",
"count": 1
},
{
"date": "2016-07-14",
"count": 1
},
{
"date": "2016-08-19",
"count": 1
},
{
"date": "2016-09-24",
"count": 1
},
{
"date": "2017-04-21",
"count": 1
},
{
"date": "2017-05-01",
"count": 1
},
{
"date": "2017-05-19",
"count": 1
},
{
"date": "2017-05-21",
"count": 1
},
{
"date": "2017-08-12",
"count": 1
},
{
"date": "2017-09-26",
"count": 1
},
{
"date": "2017-09-28",
"count": 1
},
{
"date": "2017-10-16",
"count": 1
},
{
"date": "2017-10-20",
"count": 1
},
{
"date": "2017-12-15",
"count": 1
},
{
"date": "2018-02-09",
"count": 1
},
{
"date": "2018-03-05",
"count": 1
},
{
"date": "2018-04-11",
"count": 1
},
{
"date": "2018-04-25",
"count": 1
},
{
"date": "2018-05-23",
"count": 1
},
{
"date": "2018-05-29",
"count": 1
},
{
"date": "2018-06-25",
"count": 1
},
{
"date": "2018-07-12",
"count": 1
},
{
"date": "2018-08-06",
"count": 1
},
{
"date": "2018-11-03",
"count": 1
},
{
"date": "2018-11-20",
"count": 1
},
{
"date": "2018-12-18",
"count": 1
},
{
"date": "2018-12-19",
"count": 1
},
{
"date": "2019-04-08",
"count": 1
},
{
"date": "2019-05-28",
"count": 1
},
{
"date": "2019-06-04",
"count": 1
},
{
"date": "2019-09-05",
"count": 1
},
{
"date": "2019-10-01",
"count": 1
},
{
"date": "2019-11-05",
"count": 1
},
{
"date": "2019-11-16",
"count": 1
},
{
"date": "2019-11-21",
"count": 1
},
{
"date": "2019-12-11",
"count": 1
},
{
"date": "2020-01-05",
"count": 1
},
{
"date": "2020-01-08",
"count": 1
},
{
"date": "2020-01-23",
"count": 1
},
{
"date": "2020-04-28",
"count": 1
},
{
"date": "2020-07-01",
"count": 1
},
{
"date": "2020-07-09",
"count": 1
},
{
"date": "2020-08-20",
"count": 1
},
{
"date": "2020-08-25",
"count": 2
},
{
"date": "2021-02-20",
"count": 1
},
{
"date": "2021-03-11",
"count": 1
},
{
"date": "2021-04-03",
"count": 1
},
{
"date": "2021-04-26",
"count": 1
},
{
"date": "2021-06-17",
"count": 1
},
{
"date": "2021-06-21",
"count": 2
},
{
"date": "2021-06-30",
"count": 1
},
{
"date": "2021-08-25",
"count": 1
},
{
"date": "2021-10-21",
"count": 1
},
{
"date": "2021-11-28",
"count": 1
},
{
"date": "2021-11-29",
"count": 1
},
{
"date": "2021-12-13",
"count": 1
},
{
"date": "2022-01-10",
"count": 1
},
{
"date": "2022-02-28",
"count": 1
},
{
"date": "2022-03-11",
"count": 1
},
{
"date": "2022-04-01",
"count": 1
},
{
"date": "2022-04-19",
"count": 1
},
{
"date": "2022-05-31",
"count": 1
},
{
"date": "2022-06-13",
"count": 2
},
{
"date": "2022-08-07",
"count": 1
},
{
"date": "2022-09-05",
"count": 1
},
{
"date": "2022-10-05",
"count": 1
},
{
"date": "2022-11-11",
"count": 1
},
{
"date": "2022-11-21",
"count": 1
},
{
"date": "2022-12-14",
"count": 1
},
{
"date": "2023-03-03",
"count": 1
},
{
"date": "2023-04-26",
"count": 1
},
{
"date": "2023-06-30",
"count": 1
},
{
"date": "2023-08-26",
"count": 1
},
{
"date": "2023-09-01",
"count": 1
},
{
"date": "2023-11-12",
"count": 1
},
{
"date": "2023-11-22",
"count": 1
},
{
"date": "2024-03-15",
"count": 1
},
{
"date": "2024-04-01",
"count": 1
},
{
"date": "2024-05-09",
"count": 1
},
{
"date": "2024-05-10",
"count": 1
},
{
"date": "2024-05-22",
"count": 1
},
{
"date": "2024-08-15",
"count": 1
},
{
"date": "2024-09-25",
"count": 1
},
{
"date": "2024-12-28",
"count": 1
},
{
"date": "2025-01-07",
"count": 1
},
{
"date": "2025-05-08",
"count": 1
},
{
"date": "2025-06-24",
"count": 1
},
{
"date": "2025-09-24",
"count": 1
},
{
"date": "2025-09-25",
"count": 1
},
{
"date": "2026-06-25",
"count": 1
}
],
"complete": true,
"collected": 116,
"total_forks": 117
},
"star_history": null,
"open_issues_and_prs": 28
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"doc/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"src/hamcrest/py.typed"
],
"toolchain_manifests": [],
"largest_source_bytes": 7672,
"source_files_sampled": 112,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 10,
"merged_prs": 143,
"open_issues": 18,
"closed_ratio": 0.793,
"closed_issues": 69,
"closed_unmerged_prs": 35
},
"bus_factor": 2,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "offbyone",
"commits": 261,
"avatar_url": "https://avatars.githubusercontent.com/u/181693?v=4"
},
{
"type": "User",
"login": "jonreid",
"commits": 189,
"avatar_url": "https://avatars.githubusercontent.com/u/111044?v=4"
},
{
"type": "User",
"login": "brunns",
"commits": 93,
"avatar_url": "https://avatars.githubusercontent.com/u/227768?v=4"
},
{
"type": "User",
"login": "falsetru",
"commits": 24,
"avatar_url": "https://avatars.githubusercontent.com/u/29461?v=4"
},
{
"type": "User",
"login": "perfa",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/2791303?v=4"
},
{
"type": "User",
"login": "last-partizan",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/301015?v=4"
},
{
"type": "User",
"login": "robyoung",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/14287?v=4"
},
{
"type": "User",
"login": "pupssman",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/2619359?v=4"
},
{
"type": "User",
"login": "ericscheidemantle-dreamworks",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/58859735?v=4"
},
{
"type": "User",
"login": "twm",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/43662?v=4"
}
],
"contributors_sampled": 33,
"top_contributor_share": 0.422
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"main.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
"tox.ini"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 1,
"reason": "1 out of 10 merged PRs checked by a CI test -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 5,
"reason": "Found 5/10 approved changesets -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "33 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "517a75e09372ac6fb14de9e7856edf02d5df5ffc",
"ran_at": "2026-07-28T14:36:48Z",
"aggregate_score": 3.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T09:34:54Z",
"oldest_open_prs": [
{
"number": 144,
"created_at": "2020-04-30T08:33:56Z",
"last_comment_at": "2020-04-30T12:26:04Z",
"last_comment_author": "brunns"
},
{
"number": 149,
"created_at": "2020-08-25T02:13:33Z",
"last_comment_at": "2021-03-15T04:37:28Z",
"last_comment_author": "rittneje"
},
{
"number": 226,
"created_at": "2023-03-03T21:08:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 257,
"created_at": "2024-10-08T01:44:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 263,
"created_at": "2025-01-08T04:43:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 267,
"created_at": "2025-06-24T19:32:30Z",
"last_comment_at": "2025-07-14T14:58:25Z",
"last_comment_author": "bukzor"
},
{
"number": 272,
"created_at": "2026-02-12T13:09:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 273,
"created_at": "2026-02-12T13:37:24Z",
"last_comment_at": "2026-02-12T14:24:29Z",
"last_comment_author": "brunns"
},
{
"number": 274,
"created_at": "2026-02-12T14:19:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 275,
"created_at": "2026-06-25T09:33:41Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-02-12T14:23:26Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 45,
"created_at": "2014-06-24T16:06:39Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 118,
"created_at": "2019-10-17T18:48:02Z",
"last_comment_at": "2019-10-23T03:28:44Z",
"last_comment_author": "robertwb"
},
{
"number": 126,
"created_at": "2019-11-26T19:33:53Z",
"last_comment_at": "2020-01-08T15:22:26Z",
"last_comment_author": "thehcma"
},
{
"number": 134,
"created_at": "2020-01-08T20:57:20Z",
"last_comment_at": "2020-01-10T15:42:09Z",
"last_comment_author": "alanjackman"
},
{
"number": 143,
"created_at": "2020-04-30T04:10:55Z",
"last_comment_at": "2020-04-30T09:10:15Z",
"last_comment_author": "domi41"
},
{
"number": 147,
"created_at": "2020-08-21T23:17:08Z",
"last_comment_at": "2020-08-25T00:04:17Z",
"last_comment_author": "swails"
},
{
"number": 155,
"created_at": "2021-02-17T12:23:51Z",
"last_comment_at": "2021-03-06T20:39:39Z",
"last_comment_author": "offbyone"
},
{
"number": 168,
"created_at": "2021-03-08T07:29:37Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 173,
"created_at": "2021-04-17T22:23:14Z",
"last_comment_at": "2021-04-18T07:54:28Z",
"last_comment_author": "kloczek"
},
{
"number": 174,
"created_at": "2021-06-04T08:09:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 217,
"created_at": "2022-08-24T17:44:37Z",
"last_comment_at": "2022-08-25T07:47:13Z",
"last_comment_author": "brunns"
},
{
"number": 222,
"created_at": "2022-11-27T20:25:04Z",
"last_comment_at": "2022-12-15T06:28:36Z",
"last_comment_author": "brunns"
},
{
"number": 227,
"created_at": "2023-03-03T21:11:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 234,
"created_at": "2023-07-14T17:57:55Z",
"last_comment_at": "2023-07-18T08:59:26Z",
"last_comment_author": "brunns"
},
{
"number": 235,
"created_at": "2023-07-18T15:39:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 264,
"created_at": "2025-03-10T14:21:46Z",
"last_comment_at": "2025-03-10T14:43:51Z",
"last_comment_author": "brunns"
},
{
"number": 266,
"created_at": "2025-06-24T18:43:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 271,
"created_at": "2025-10-22T13:32:50Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/hamcrest/PyHamcrest",
"host": "github.com",
"name": "PyHamcrest",
"owner": "hamcrest"
},
"metrics": {
"overall": {
"key": "overall",
"band": "critical",
"name": "Overall health",
"note": "High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At risk ceiling of 49.",
"notes": [
{
"code": "jurisdiction_overall_adjustment",
"params": {
"cap": 49,
"pct": 50
}
}
],
"value": 26,
"inputs": {
"security": 18,
"vitality": 24,
"community": 69,
"governance": 66,
"engineering": 78,
"high_risk_jurisdiction_cap": 49,
"high_risk_jurisdiction_multiplier": 50,
"weighted_overall_before_jurisdiction": 52,
"overall_after_jurisdiction_multiplier": 26
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "critical",
"name": "Vitality",
"value": 24,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"commits_last_year": 3,
"human_commit_share": 0.93,
"days_since_last_push": 166,
"active_weeks_last_year": 1
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 166 days ago",
"points": 9.9,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 166
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "1/52 weeks with commits",
"points": 0.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 1
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "3 commits in the last year",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 3
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"releases_count": 10,
"latest_release_tag": "V2.1.0",
"releases_from_tags": false,
"days_since_latest_release": 1009,
"mean_days_between_releases": 403.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "10 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 10
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1009 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 1009
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~403.4 days",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 403.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 166,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 166 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 166
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 69,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "good",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"forks": 117,
"stars": 805,
"watchers": 23,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "805 stars",
"points": 47.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 805
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "117 forks",
"points": 17.2,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 117
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "23 watchers",
"points": 7.5,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 23
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"packages": [
"PyHamcrest"
],
"dependents": null,
"ecosystems": "pypi",
"total_downloads": null,
"monthly_downloads": 5892698
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "5,892,698 downloads/month across pypi",
"points": 80,
"status": "met",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 5892698,
"ecosystems": "pypi"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 66,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 33,
"top_contributor_share": 0.422
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 42% of commits",
"points": 13,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 42
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "33 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 33
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"merged_prs": 143,
"open_issues": 18,
"closed_issues": 69,
"issue_closed_ratio": 0.793,
"closed_unmerged_prs": 35
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "79% of issues closed",
"points": 37.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 79
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "143/178 decided PRs merged",
"points": 30.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 143,
"decided": 178
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 5/10 approved changesets -- score normalized to 5",
"points": 7.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"followers": 43,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "hamcrest",
"public_repos": 7,
"account_age_days": 5230
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "43 followers of hamcrest",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 43,
"login": "hamcrest"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "7 public repos, account ~14 yr old",
"points": 18.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 7
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "moderate",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"packages": [
"PyHamcrest"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 1009
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 1009 days ago",
"points": 4,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 1009
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "24 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 24
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 78,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "tox.ini",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tox.ini"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "1 out of 10 merged PRs checked by a CI test -- score normalized to 1",
"points": 2,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "http://hamcrest.org/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://hamcrest.org/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 18,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier to Security posture and gives it an At risk ceiling of 49.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "jurisdiction_posture_adjustment",
"params": {
"cap": 49,
"pct": 50
}
}
],
"value": 18,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.5,
"high_risk_jurisdiction_cap": 49,
"high_risk_jurisdiction_multiplier": 50,
"security_posture_after_multiplier": 18,
"security_posture_before_jurisdiction": 35
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "1 out of 10 merged PRs checked by a CI test -- score normalized to 1",
"points": 0.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 5/10 approved changesets -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "33 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "moderate",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 50,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": true,
"exposures": [
{
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "Russia: top_contributor (1)",
"points": 50,
"status": "partial",
"details": [
{
"code": "jurisdiction_exposure",
"params": {
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 56,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.548,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "51 of 93 human commits state their intent (structured subject or explanatory body)",
"points": 29.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 51,
"sampled": 93
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"uv.lock"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [
"doc/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"src/hamcrest/py.typed"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "doc/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "doc/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "tox.ini",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tox.ini"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "src/hamcrest/py.typed",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "src/hamcrest/py.typed"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 7672,
"source_files_sampled": 112,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (src/hamcrest/py.typed)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "src/hamcrest/py.typed",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/112 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 112,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-28T14:37:16.438755Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/h/hamcrest/PyHamcrest.svg",
"full_name": "hamcrest/PyHamcrest",
"license_state": "custom",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — PyPI.