Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 17:29 UTC
jwodder / pypi-simple
PyPI Simple Repository API client library
jwodder/pypi-simple holds a health index of 66 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (90/100) and lowest on AI Readiness (47/100). It was last updated 6 days ago. A single contributor accounts for most of its recent work.
66
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
66
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
John T. Wodder IIPersonal account
74 followers172 public repossince Jun 2009
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| PyPI | pypi-simple | 1.8.0 | 342,629 | 21 | 326 days ago | packagespep503pippypisimple-repository-api |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
64
Development activity
64Moderate
How it's scored
| 36/36 | Push recency — last push 6 days ago |
| 9.7/36 | Commit cadence — 14/52 weeks with commits |
| 13.5/18 | Commit volume — 31 commits in the last year |
| 5/10 | OpenSSF Scorecard: Maintained — 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
Inputs used
| commits_last_year | 31 |
| human_commit_share | 0.87 |
| days_since_last_push | 6 |
| active_weeks_last_year | 14 |
Release discipline
63Moderate
How it's scored
| 27/27 | Ships releases — 21 releases published |
| 16.2/36 | Release recency — latest release 326 days ago |
| 19.8/27 | Release cadence — a release every ~103 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 21 |
| latest_release_tag | v1.8.0 |
| releases_from_tags | no |
| days_since_latest_release | 326 |
| mean_days_between_releases | 103 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
55
Popularity & adoption
37At risk
How it's scored
| 26.3/60 | Stars — 43 stars |
| 8.7/25 | Forks — 12 forks |
| 1.7/15 | Watchers — 3 watchers |
Inputs used
| forks | 12 |
| stars | 43 |
| watchers | 3 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
92Excellent
How it's scored
| 73.8/80 | Monthly downloads — 342,629 downloads/month across pypi |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | pypi-simple |
| dependents | — |
| ecosystems | pypi |
| total_downloads | — |
| monthly_downloads | 342,629 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
58
Maintainer resilience (bus factor)
24Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0.7/22.5 | Commit distribution — top contributor authored 97% of commits |
| 4.1/13.5 | Contributor breadth — 3 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 7 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 3 |
| top_contributor_share | 0.969 |
Issue & PR responsiveness
69Moderate
How it's scored
| 42.5/46.8 | Issue resolution — 91% of issues closed |
| 26.2/38.3 | PR acceptance — 35/51 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/14 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 35 |
| open_issues | 1 |
| closed_issues | 10 |
| issue_closed_ratio | 0.909 |
| closed_unmerged_prs | 16 |
Ownership & stewardship
61Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 13.5/25 | Owner reach — 74 followers of jwodder |
| 25/25 | Track record — 172 public repos, account ~17 yr old |
Inputs used
| followers | 74 |
| owner_type | User |
| is_verified | — |
| owner_login | jwodder |
| public_repos | 172 |
| account_age_days | 6,242 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
91Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on pypi |
| 26/35 | Publish recency — latest publish 326 days ago |
| 20/20 | Version history — 21 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | pypi-simple |
| ecosystems | pypi |
| any_deprecated | no |
| min_days_since_publish | 326 |
Engineering Quality
Are baseline engineering and documentation practices in place?
90
Engineering practices
94Excellent
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — tox.ini |
| 9.6/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 17 out of 17 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | yes |
Documentation
85Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 10/10 | Topics — 7 topics |
| 10/10 | Wiki |
Inputs used
| topics | pypi, pep503, simple-repository-api, packages, pip, python, available-on-pypi |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
62
Security posture
52Moderate
How it's scored
| 6.8/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 17 out of 17 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/14 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 7 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 3.8/7.5 | Maintained — 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| 0/5 | Packaging — no data |
| 1.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 5.2 |
Excluded from scoring (no data or not applicable): packaging. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 15 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:pypi-simple@1.8.0 runtime dependency closure — what installing the published package pulls in — 15 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
47
Agent context & guidance
19Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 19/40 | Legible commit history — 31 of 87 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.356 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
55Moderate
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — tox.ini |
| 11/11 | Static type checking — src/pypi_simple/py.typed |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 8/8 | Automated maintenance — 13 of the last 100 commits are automated dependency updates |
| 3/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | src/pypi_simple/py.typed |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.13 |
How it's scored
| 27/45 | Type-checkable code — Python with type-check config (src/pypi_simple/py.typed) |
| 55/55 | Manageable file sizes — 0/20 source files over 60KB |
Inputs used
| primary_language | Python |
| largest_source_bytes | 41,594 |
| source_files_sampled | 20 |
| oversized_source_files | 0 |
Key facts
43GitHub stars
3contributors
31commits, last 12 months
6days since last push
21releases
1bus factor
1open issues
PyPIpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 12 ⇿
0Stars
12Forks
14Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 11Patch 2
Each point covers 6 days.
OpenSSF Scorecard 5.2 / 10
5.2aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 9 | Binary-Artifacts | binaries present in source code |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 17 out of 17 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/14 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 7 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 5 | Maintained | 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| n/a | Packaging | packaging workflow not detected |
| 3 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 3 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 5
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| PyPI | beautifulsoup4 | ~= 4.5 | pyproject.toml |
| PyPI | mailbits | ~= 0.2 | pyproject.toml |
| PyPI | packaging | >= 20 | pyproject.toml |
| PyPI | pydantic | ~= 2.0 | pyproject.toml |
| PyPI | requests | ~= 2.20 | pyproject.toml |
All dependencies 8
Full resolved dependency set from the GitHub dependency graph: 5 direct and 3 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| PyPI | beautifulsoup4 | — | direct |
| PyPI | mailbits | — | direct |
| PyPI | packaging | — | direct |
| PyPI | pydantic | — | direct |
| PyPI | requests | — | direct |
| PyPI | sphinx | — | indirect |
| PyPI | sphinx-copybutton | — | indirect |
| PyPI | sphinx-rtd-theme | — | indirect |
Dependency advisories 0
Installing pypi:pypi-simple@1.8.0 pulls in 15 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"pypi",
"pep503",
"simple-repository-api",
"packages",
"pip",
"python",
"available-on-pypi"
],
"is_fork": false,
"size_kb": 413,
"has_wiki": true,
"homepage": null,
"languages": {
"HTML": 15156,
"Python": 232444
},
"pushed_at": "2026-07-20T12:46:39Z",
"created_at": "2018-08-30T21:27:48Z",
"owner_type": "User",
"updated_at": "2026-07-20T12:48:56Z",
"description": "PyPI Simple Repository API client library",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": null,
"name": "John T. Wodder II",
"type": "User",
"login": "jwodder",
"company": null,
"location": "A well house for a large spring",
"followers": 74,
"avatar_url": "https://avatars.githubusercontent.com/u/98207?v=4",
"created_at": "2009-06-23T15:24:03Z",
"is_verified": null,
"public_repos": 172,
"account_age_days": 6242
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2025-09-03T14:46:22Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2025-07-28T15:49:41Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2024-10-23T16:20:02Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2024-07-18T16:10:53Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2024-02-24T21:08:18Z"
},
{
"tag": "v1.4.1",
"kind": "patch",
"published_at": "2024-01-30T22:32:44Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2023-11-01T14:32:01Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2023-11-01T13:15:10Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2023-09-23T18:57:54Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2023-02-19T19:38:11Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2022-10-31T22:33:52Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2022-06-30T14:49:36Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2021-08-26T20:58:24Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2020-12-13T19:47:18Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2020-10-15T02:22:11Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2020-03-01T20:58:59Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2019-05-12T16:23:19Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2018-09-06T18:55:15Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2018-09-03T15:05:18Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2018-09-01T16:34:21Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2018-08-31T19:25:10Z"
}
],
"recent_commits": [
{
"oid": "cac12ffef4ffca30c4917bb5783ef13098ac4b77",
"body": "| datasource | package | from | to |\n| ----------- | -------------------- | ------ | ------ |\n| github-tags | actions/setup-python | v6.3.0 | v7.0.0 |\n\n\nSigned-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-actions] Update actions/setup-python action to v7",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-20T12:46:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1556ea1e7c2e69b2562a927d277198c9b31b19a",
"body": "| datasource | package | from | to |\n| ----------- | ---------------- | ------ | ------ |\n| github-tags | actions/checkout | v6.0.3 | v7.0.0 |\n\n\nSigned-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-actions] Update actions/checkout action to v7",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-06-22T12:23:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da8e45340ba8924146c80512b298d90635933002",
"body": "| datasource | package | from | to |\n| ----------- | ---------------------- | ------ | ------ |\n| github-tags | codecov/codecov-action | v6.0.2 | v7.0.0 |\n\n\nSigned-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-actions] Update codecov/codecov-action action to v7",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-06-08T15:58:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbffd786bf03ec9584da1a9dabc2a30a287b2f1b",
"body": "…rder",
"is_bot": false,
"headline": "That (a) is no longer needed and (b) has the arguments in the wrong o…",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2026-06-08T15:49:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ab950e545667e9a11bca0b6e4ffdea0cde0a064",
"body": "Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-actions] Pin dependencies",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-06-08T14:58:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e431517dbff59c162c2490c95a947b9920c3717",
"body": null,
"is_bot": false,
"headline": "Switch from Dependabot to Renovate",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2026-04-30T23:22:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6a4627c5a0d6133ee3ab50fc2ca997c111ba995",
"body": null,
"is_bot": false,
"headline": "Improve GitHub Actions workflow security",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2026-04-30T22:28:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d0982bdc7b797c39b1461136eddd9468eb5b9f0",
"body": null,
"is_bot": false,
"headline": "Stop testing against PyPy 3.10",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2026-04-14T10:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ed12963b91965024fc33022feb4f5016fcbb190",
"body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 6.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/compare/v\n[…]\npendency-name: codecov/codecov-action\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "[gh-actions](deps): Bump codecov/codecov-action from 5 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-30T01:56:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "79b51a7fdeb3da3404a355bfaf238793a4cfe7ae",
"body": "Updates the requirements on [sphinx](https://github.com/sphinx-doc/sphinx) to permit the latest version.\n- [Release notes](https://github.com/sphinx-doc/sphinx/releases)\n- [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES.rst)\n- [Commits](https://github.com/sphinx-doc/sphinx/compare/v8.0.0...v9.1.0)\n\n---\nupdated-dependencies:\n- dependency-name: sphinx\n dependency-version: 9.1.0\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "[python+docs]: Update sphinx requirement from ~=8.0 to ~=9.1 in /docs",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-12T16:44:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c26448ce2ba41e0c05fdb308ab4939b3b75799aa",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v5...v6)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "[gh-actions](deps): Bump actions/checkout from 5 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-11-24T03:02:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b07b13c299a2cc9debc509c39321e140421837c4",
"body": "Run pyupgrade",
"is_bot": false,
"headline": "Merge pull request #52 from jwodder/pyupgrade",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-10-28T16:17:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cca31d72742252a1af24e95dfd7733785ea384fa",
"body": null,
"is_bot": false,
"headline": "Run pyupgrade",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-10-28T16:15:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0d21b6f46616ba7231255f3fcf7d5b4966f1714",
"body": "Support Python 3.14; drop support for Python 3.8 & 3.9",
"is_bot": false,
"headline": "Merge pull request #51 from jwodder/pyup",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-10-28T16:15:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da2230cf404a3dff0b21b0bcd6410a2fd5e57d08",
"body": null,
"is_bot": false,
"headline": "Drop support for Python 3.8 & 3.9",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-10-28T16:10:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5363e5c9e95ccae1de0b66342be1968db78a7711",
"body": null,
"is_bot": false,
"headline": "Test against python 3.14",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-10-28T16:09:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ad3725f8347aa4bd7cc2733eea212969d706432",
"body": null,
"is_bot": false,
"headline": "Autoupdate .pre-commit-config.yaml",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-10-27T23:13:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74c09aabb524d8e80751fc242fd8842e203e17c6",
"body": "Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-python\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "[gh-actions](deps): Bump actions/setup-python from 5 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-09-08T02:22:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fb12674d17794aed92bd318419d42d8c4e75a7c",
"body": "- Provenance support belatedly updated to match a change to PEP 740:\n - `DistributionPackage.provenance_sha256` is now deprecated and is always `None`\n - `DistributionPackage.provenance_url` is now determined correctly and is `None` when no provenance file is declared\n - `PyPISimple.get_provenance()` no longer verifies the provenance's digest, and the `verify` argument is now deprecated",
"is_bot": false,
"headline": "v1.8.0 — Fix provenance support",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-09-03T14:45:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b32be83751c94fe8718a12423efe8b3e9cd989be",
"body": "Update for change in PEP 740",
"is_bot": false,
"headline": "Merge pull request #48 from jwodder/up-740",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-09-03T14:43:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "357a20116c075a93d4151c1d776d0bd78c88def6",
"body": null,
"is_bot": false,
"headline": "Update for change in PEP 740",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-09-03T14:36:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f7062904ae56a87b2d4bd2d2c973083ef602afa",
"body": "Exclude `docs/` from Dependabot block for `/`",
"is_bot": false,
"headline": "Merge pull request #45 from jwodder/dep-exclude",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-08-26T18:40:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "469c21a35de205b104de97f2654a322f429237cd",
"body": null,
"is_bot": false,
"headline": "Exclude `docs/` from Dependabot block for `/`",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-08-26T18:37:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bbf60511c40f76630b14680b7079c64f635492e",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v5)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '5'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "[gh-actions](deps): Bump actions/checkout from 4 to 5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-08-18T02:02:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "88da01dfd88bc28b57d08b862fec7f523d0ddda3",
"body": "Test against PyPy 3.11",
"is_bot": false,
"headline": "Merge pull request #43 from jwodder/pypy311",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-07-28T16:43:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4af6e0d910ce89cab6fcff66437b4f0ef7133130",
"body": null,
"is_bot": false,
"headline": "Test against PyPy 3.11",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-07-28T15:59:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be5ea349c5a0f4f0fd5fa0c2e766e6d61a9c2874",
"body": "- Support Python 3.13\n- **Bugfix**: Fix parsing of PEP 708 `alternate-locations` fields in JSON project pages (Previous versions looked for the field in the wrong location)\n- Support PEP 792\n - `status` and `status_reason` attributes added to `ProjectPage` and `RepositoryPage`\n - `ProjectStatus` enum added\n - `SUPPORTED_REPOSITORY_VERSION` increased to `\"1.4\"`",
"is_bot": false,
"headline": "v1.7.0 — Support PEP 792",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-07-28T15:49:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4ca2db13322b60b7c7fdd8e378e2332fe0bee2b",
"body": "Support PEP 792",
"is_bot": false,
"headline": "Merge pull request #42 from jwodder/pep792",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-07-28T15:46:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54c1288013b833b5d8d4b6c41a16ead9a7dda283",
"body": null,
"is_bot": false,
"headline": "Support PEP 792",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-07-28T15:42:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e7b94dce6976b226a2b77ac0e956f47b12e6414",
"body": "Fix parsing of `alternate-locations` in JSON responses",
"is_bot": false,
"headline": "Merge pull request #41 from jwodder/altlocs",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-07-28T15:19:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a9f1b6983db8dc01a6d76ee91458ca330dc5709",
"body": null,
"is_bot": false,
"headline": "Fix parsing of `alternate-locations` in JSON responses",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-07-28T15:15:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ddeeb6ecf2f78583ae6ab853048d1a85aa3b313",
"body": null,
"is_bot": false,
"headline": "Update for PEP 639",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-01-23T14:38:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b16dff114b27b66cc7a576d5b2d015268400ee2",
"body": null,
"is_bot": false,
"headline": "Don't use untyped version of responses",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2025-01-11T12:30:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9704b60080dde18695cffd18f641f172e53fb0a9",
"body": null,
"is_bot": false,
"headline": "[skip ci] Limit push runs to default branch",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-11-29T16:01:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "277a4e25dce8fee62f36aa21ae2b0e747a5b1f14",
"body": null,
"is_bot": false,
"headline": "Add support for Python 3.13",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-11-29T14:42:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8eae89a27555c3e37cf7d25b2f56733d4aed044",
"body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4 to 5.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/compare/v\n[…]\nupdated-dependencies:\n- dependency-name: codecov/codecov-action\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "[gh-actions](deps): Bump codecov/codecov-action from 4 to 5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-11-18T13:40:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c382c994457187f096423997514bc2d345cd5c80",
"body": "Add a warning about the caching of the top level page",
"is_bot": false,
"headline": "Merge pull request #34 from warsaw/warsaw/doc-update",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-11-04T19:58:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74a350cce44cde28764f3a19c8075329c2428384",
"body": "Co-authored-by: John T. Wodder II <jwodder@users.noreply.github.com>",
"is_bot": false,
"headline": "Update src/pypi_simple/client.py",
"author_name": "Barry Warsaw",
"author_login": "warsaw",
"committed_at": "2024-11-04T19:22:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49264f1c2e8646bae5700c16a4b0f5b42d518fd8",
"body": null,
"is_bot": false,
"headline": "Add an admonition about the caching of the top level page",
"author_name": "Barry Warsaw",
"author_login": "warsaw",
"committed_at": "2024-11-04T18:49:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce4037017180614fae9fd7ab2c16a25d7dcbd8f6",
"body": "- `SUPPORTED_REPOSITORY_VERSION` increased to `\"1.3\"` for compatibility with PEP 740",
"is_bot": false,
"headline": "v1.6.1 — Update `SUPPORTED_REPOSITORY_VERSION`",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-10-23T16:19:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "718e7a1fe4ed0a67074a740eea5349f8e727f0e4",
"body": null,
"is_bot": false,
"headline": "Increase `SUPPORTED_REPOSITORY_VERSION` to 1.3",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-10-23T16:13:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a357d83ad83ac54a81c0abb6097b9858e424f222",
"body": null,
"is_bot": false,
"headline": "Update `docs/requirements.txt`",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-10-08T16:31:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba1fec22b4af2294b2cae152342d4bdc3ccd9f94",
"body": "- Drop support for Python 3.7\n- Support PEP 740\n - `provenance_sha256` and `provenance_url` fields added to `DistributionPackage`\n - `get_provenance()` method added to `PyPISimple`\n - `NoProvenanceError` exception type added\n- Add `url` fields to the `DigestMismatchError`, `NoDigestsError`, and `NoMetadataError` classes",
"is_bot": false,
"headline": "v1.6.0 — Support PEP 740",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-07-18T16:10:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff1fbfc1e1ed1a43a28f935b2a7b3952f440f6a2",
"body": "Assorted documentation improvements",
"is_bot": false,
"headline": "Merge pull request #29 from jwodder/tweak-docs",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-07-18T16:06:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a95bebc80e22db178ba7de8bfc306035c69230f",
"body": null,
"is_bot": false,
"headline": "Assorted documentation improvements",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-07-18T16:00:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69628b12439500a3def3d2beef1970a24400c3f1",
"body": "Drop `typing_extensions` dependendency",
"is_bot": false,
"headline": "Merge pull request #28 from jwodder/no-typing-ext",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-07-18T15:55:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f67ceaa4d7f2c085e337ce261f8b7951fc9209ed",
"body": "No longer needed now that Python 3.7 is no longer supported",
"is_bot": false,
"headline": "Drop `typing_extensions` dependendency",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-07-18T15:50:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a9098df32e97613c1e792dfb86f5a3238d2c247",
"body": "Add `url` fields to various exception types",
"is_bot": false,
"headline": "Merge pull request #27 from jwodder/errors",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-07-18T15:49:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04439cdd3f31367edb77a36988460b8cbe7f94d3",
"body": null,
"is_bot": false,
"headline": "More exception tests",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-07-18T15:45:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b4439430944085df4e7997a68fea6d9104f7361",
"body": null,
"is_bot": false,
"headline": "Add `url` fields to various exception types",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-07-18T15:40:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2716c75400d5cc97800b17b66385718942824415",
"body": null,
"is_bot": false,
"headline": "Move 404 exception types from `client.py` to `errors.py`",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-07-18T15:25:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed844511f3924808d7cae471b45a5adbc14bc447",
"body": "Support PEP 740",
"is_bot": false,
"headline": "Merge pull request #26 from jwodder/pep740",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-07-18T15:22:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cf26887a3849295132f7d1b502bc25b9a6443d2",
"body": null,
"is_bot": false,
"headline": "Support PEP 740",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-07-18T15:18:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "974d80e63158d9c0034fc64df94117f7cc2d0e3a",
"body": null,
"is_bot": false,
"headline": "Drop support for Python 3.7",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-05-02T13:12:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cee0af3a313ab072e52bc670e2bb1e2621279d44",
"body": null,
"is_bot": false,
"headline": "Autoupdate .pre-commit-config.yaml",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-05-01T23:49:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94bebcadd000bb4aacfc63d1e6fd23c4656e6db4",
"body": "Apparently, GitHub is now rendering rST into HTML 5.",
"is_bot": false,
"headline": "Adjust rST for README badges",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-04-23T20:22:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f10f3f6a9bd43884af375f6feba3c3d65b454d10",
"body": "- **Bugfix**: Fix parsing of \"true\" `data-core-metadata` attributes and handling of the attribute's absence (contributed by [@thatch](https://github.com/thatch))\n - `DistributionPackage.has_metadata` will now be `None` if this attribute was absent in the HTML returned by PyPI. Previously, it wou\n[…]\now always decodes responses as UTF-8 (contributed by [@thatch](https://github.com/thatch))\n- Request methods now take optional `headers` arguments (contributed by [@thatch](https://github.com/thatch))",
"is_bot": false,
"headline": "v1.5.0 — Custom headers and decoding metadata",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-02-24T21:07:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7642c132f214b6b9f69371a8ca211bd4cc46f914",
"body": null,
"is_bot": false,
"headline": "Typo",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-02-24T21:03:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c90f3eb1320144c39228cb88a435fa7ccb69b02",
"body": null,
"is_bot": false,
"headline": "Add a missing :param:",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-02-24T21:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6654a695866a6cd964161dbc6537e4f3bf4afcd7",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-02-24T20:58:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b1319d509c72b707b5cd8c888ddd2419b1691d6",
"body": "Allow specifying custom request headers.",
"is_bot": false,
"headline": "Merge pull request #23 from thatch/custom-headers",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-02-24T20:55:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ee05dfea91b611acb04f462bf277165f3ec09e0",
"body": null,
"is_bot": false,
"headline": "Address review comments, add tests",
"author_name": "Tim Hatch",
"author_login": "thatch",
"committed_at": "2024-02-21T00:00:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b37f3cd855c81774545aec9d2d771c872047303c",
"body": "When used with a CacheControl session, this allows requesting fresh data with\n`{\"Cache-Control\": \"max-age=0\"}` which is what pip does:\n\nhttps://github.com/pypa/pip/blob/51de88ca6459fdd5213f86a54b021a80884572f9/src/pip/_internal/index/collector.py#L145-L158",
"is_bot": false,
"headline": "Allow specifying custom request headers.",
"author_name": "Tim Hatch",
"author_login": "thatch",
"committed_at": "2024-02-20T23:37:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75569b2ea7a16f4e87d09da52b8c7ee956622461",
"body": null,
"is_bot": false,
"headline": "Update changelog; tweak docs",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-02-20T20:43:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cdf45edee17e9147409fb00ddc6460f5f37469c",
"body": "Always consider metadata as utf-8.",
"is_bot": false,
"headline": "Merge pull request #22 from thatch/fetch-metadata-as-bytes",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-02-20T20:35:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fdb8f65ab6c16449ada5aba3a2fe88ddc636a35",
"body": null,
"is_bot": false,
"headline": "Add `get_package_metadata_bytes`, use surrogateescape",
"author_name": "Tim Hatch",
"author_login": "thatch",
"committed_at": "2024-02-20T20:25:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f98c86a5c94faa85d76dab6c4737f704590c416",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-02-17T23:03:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bcd0cea5435ac2859020b7903ceed5620a01ed95",
"body": "Support `data-core-metadata=\"true\"`",
"is_bot": false,
"headline": "Merge pull request #24 from thatch/metadata-true",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-02-17T22:55:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88e7734e7f32106916534b1cbc7daad2bd04aa70",
"body": "\r\nAllow any true, case-insensitively\n\nCo-authored-by: John T. Wodder II <jwodder@users.noreply.github.com>",
"is_bot": false,
"headline": "Update src/pypi_simple/classes.py",
"author_name": "Tim Hatch",
"author_login": "thatch",
"committed_at": "2024-02-17T22:51:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a76fa843a28fb1602f5537d22ecbbfbf05bd2236",
"body": "PEP 658 says:\n\n> The repository SHOULD provide the hash of the Core Metadata file as the\n> data-dist-info-metadata attribute’s value using the syntax\n> <hashname>=<hashvalue>, where <hashname> is the lower cased name of the hash\n> function used, and <hashvalue> is the hex encoded digest. The reposit\n[…]\nomits\nentirely, this now maps omit to `None` instead of `False`. If this is\nincorrect we should probably make the comment say something different. PEP 658\ndoesn't say anything about a `false` value.",
"is_bot": false,
"headline": "Support `data-core-metadata=\"true\"`",
"author_name": "Tim Hatch",
"author_login": "thatch",
"committed_at": "2024-02-17T01:52:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "59eca795e416ceb7b0c827226f4e6ad6d15e08d6",
"body": "This is documented near the beginning of\nhttps://packaging.python.org/en/latest/specifications/core-metadata/ and\nwarehouse currently serves these as `content-type: application/octet-stream`\nwith no encoding, so requests spends a surprising amount of time on what are\ngenerally lower-ascii files trying to guess an encoding.",
"is_bot": false,
"headline": "Always consider metadata as utf-8.",
"author_name": "Tim Hatch",
"author_login": "thatch",
"committed_at": "2024-02-17T00:17:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1347d57f8886510ec68e64ff6be116962228e22",
"body": "…/codecov-action-4\n\n[gh-actions](deps): Bump codecov/codecov-action from 3 to 4",
"is_bot": false,
"headline": "Merge pull request #21 from jwodder/dependabot/github_actions/codecov…",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-02-05T16:52:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0a0a3eb99ffddad4879adf21f4be55070c69672",
"body": null,
"is_bot": false,
"headline": "Update Codecov config",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-02-05T16:42:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc45691e999abac1be12f50fc1feec3ce4e4b60e",
"body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 4.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/compare/v\n[…]\nupdated-dependencies:\n- dependency-name: codecov/codecov-action\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "[gh-actions](deps): Bump codecov/codecov-action from 3 to 4",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-02-05T00:26:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "37adbb2a67f56abdb3d5be4838cf72dcfc16478d",
"body": "- Migrated from setuptools to hatch\n- **Bugfix**: When no `accept` argument is passed to `PyPISimple.get_project_page()`, actually fall back to the value supplied on client instantiation, as documented (contributed by [@thatch](https://github.com/thatch))",
"is_bot": false,
"headline": "v1.4.1 — Fix `get_project_page()`",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-01-30T22:32:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab5f7e874c5f04707eac10fffc16b6727a016c53",
"body": null,
"is_bot": false,
"headline": "Update changelog",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-01-30T22:31:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d854d162216e399d9f3c0031a67adfb5a4138edd",
"body": "Use instance-default accept in get_project_page",
"is_bot": false,
"headline": "Merge pull request #20 from thatch/get-project-page-accept",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-01-30T22:27:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d115d529074a4c21ca287a7e87f15fdd6875775",
"body": "This appears to be an oversight in the commit where instance-default accept was added.",
"is_bot": false,
"headline": "Use instance-default accept in get_project_page",
"author_name": "Tim Hatch",
"author_login": "thatch",
"committed_at": "2024-01-30T22:10:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20d501e8ddb4891c4200b5545cf4ced3967aece8",
"body": "Test against PyPy 7.3.14+",
"is_bot": false,
"headline": "Merge pull request #19 from jwodder/test-new-pypy",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-01-24T12:01:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd88682d6195ec31aed6b50ea9c6ad709e374566",
"body": null,
"is_bot": false,
"headline": "Ensure PyPy tests are against latest versions",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-01-24T11:57:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a18cb92e38ede8126dc1317ff6171b1a7910520",
"body": null,
"is_bot": false,
"headline": "Update a warning filter",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2024-01-08T21:39:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38a481088390ac330f55d07388f9aeafc43f4a14",
"body": "Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5.\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-python\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "[gh-actions](deps): Bump actions/setup-python from 4 to 5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2023-12-11T01:35:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e4eb1d61376b103bcc4e6b0c3439ccf2cd9d3c0",
"body": "Updates the requirements on [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) to permit the latest version.\n- [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst)\n- [Commits](https://github.com/readthedocs/sphinx_rtd_theme/compare/1.0.0...2.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: sphinx-rtd-theme\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "[python+docs]: Update sphinx-rtd-theme requirement in /docs",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2023-12-04T03:07:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d2d182eee54f4e8c0ccd9c659a3a994c66b2523",
"body": null,
"is_bot": false,
"headline": "Try to tell Dependabot to only bump docs/requirements.txt when necessary",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-19T16:42:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "410ff94e4466be5c940131ef7f453f90de09bc96",
"body": null,
"is_bot": false,
"headline": "Switch to Hatch",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-19T15:48:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eca81b8b0f075f3cb586823a6127c975d4e9255e",
"body": null,
"is_bot": false,
"headline": "Start work on next version",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-19T15:48:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b968587e11d96cff5f5d14f5c3ed2251818021e",
"body": null,
"is_bot": false,
"headline": "Turns out, I'm the one who was buggy.",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-08T10:59:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06b4173897ae51b995af8bc905164bfb2ac2ac5a",
"body": null,
"is_bot": false,
"headline": "Disable buggy pydantic-mypy option",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-03T20:51:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff386458e3574efe7631f92b815ac5c9754052ad",
"body": null,
"is_bot": false,
"headline": "Don't use buggy version of responses",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-03T19:55:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "425dde6683b91bbb006be9c87583f05416954c57",
"body": null,
"is_bot": false,
"headline": "Update pydantic-mypy config",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-03T19:52:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fae6773aa20483c1298d8cd57e744786a6ead964",
"body": null,
"is_bot": false,
"headline": "Update some boilerplate",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-01T16:27:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cebf857fe65f169550f1de8047afa2d1e51d6f35",
"body": "- Support PEP 708\n - `tracks` and `alternate_locations` attributes added to `ProjectPage`\n - `pypi_meta`, `tracks`, and `alternate_locations` attributes added to `RepositoryPage`\n - `SUPPORTED_REPOSITORY_VERSION` increased to `\"1.2\"`",
"is_bot": false,
"headline": "v1.4.0 — Support PEP 708",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-01T14:31:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2514ec5cdd67c7cd7a5d24a5cbc8e31abb9c210e",
"body": null,
"is_bot": false,
"headline": "Documentation updates",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-01T14:28:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60b8118c8de88ed7463388ed6d1d4f141e0b69c4",
"body": null,
"is_bot": false,
"headline": "Support PEP 708",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-01T14:21:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "daaaf22ec0551810b698b528c44fd994ae76b643",
"body": "- Support Python 3.12\n- Update for PEP 714\n- Gave `PyPISimple` a `get_package_metadata()` method\n- Added an examples page to the documentation",
"is_bot": false,
"headline": "v1.3.0 — Fetching metadata",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-01T13:14:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d7d02c453ca44c9235a65da713b6dd0efc50e30",
"body": null,
"is_bot": false,
"headline": "Better return type annotation",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-01T13:07:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc65cd031fd936368436cbe6a7ad09747a7a4aa1",
"body": null,
"is_bot": false,
"headline": "Add examples to docs",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-01T13:01:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eab87ee3c707957aa392d5a819d1c7e6871d5353",
"body": null,
"is_bot": false,
"headline": "Warehouse implemented that",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-01T12:31:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "237b20bce67fd9b42ecda09e74e952a37eb95428",
"body": null,
"is_bot": false,
"headline": "Add get_package_metadata() method",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-01T12:28:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7ba750b6126abe108092714daf43534d89c558b",
"body": null,
"is_bot": false,
"headline": "Update for PEP 714",
"author_name": "John T. Wodder II",
"author_login": "jwodder",
"committed_at": "2023-11-01T12:18:18Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 21,
"commits_last_year": 31,
"latest_release_at": "2025-09-03T14:46:22Z",
"latest_release_tag": "v1.8.0",
"releases_from_tags": false,
"days_since_last_push": 6,
"active_weeks_last_year": 14,
"days_since_latest_release": 326,
"mean_days_between_releases": 103
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "pypi-simple",
"exists": true,
"license": "MIT",
"keywords": [
"packages",
"pep503",
"pip",
"pypi",
"simple repository api",
"Development Status :: 5 - Production/Stable",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3 :: Only",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.13",
"Programming Language :: Python :: 3.8",
"Programming Language :: Python :: 3.9",
"Programming Language :: Python :: Implementation :: CPython",
"Programming Language :: Python :: Implementation :: PyPy",
"Topic :: Software Development :: Libraries :: Python Modules",
"Topic :: System :: Software Distribution",
"Topic :: Text Processing :: Markup :: HTML",
"Typing :: Typed"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/pypi-simple/",
"is_deprecated": false,
"latest_version": "1.8.0",
"repository_url": "https://github.com/jwodder/pypi-simple",
"versions_count": 21,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 342629,
"first_published_at": "2018-08-31T19:25:12.453969Z",
"latest_published_at": "2025-09-03T14:46:25.115446Z",
"latest_version_yanked": null,
"days_since_latest_publish": 326
}
]
},
"popularity": {
"forks": 12,
"stars": 43,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2019-06-26",
"count": 1
},
{
"date": "2020-03-07",
"count": 1
},
{
"date": "2020-09-17",
"count": 1
},
{
"date": "2021-08-06",
"count": 1
},
{
"date": "2023-01-17",
"count": 1
},
{
"date": "2023-04-21",
"count": 1
},
{
"date": "2023-07-10",
"count": 1
},
{
"date": "2023-12-10",
"count": 1
},
{
"date": "2024-01-30",
"count": 1
},
{
"date": "2024-11-04",
"count": 1
},
{
"date": "2025-04-11",
"count": 1
}
],
"complete": true,
"collected": 11,
"total_forks": 12
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"src/pypi_simple/py.typed"
],
"toolchain_manifests": [],
"largest_source_bytes": 41594,
"source_files_sampled": 20,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"docs/requirements.txt",
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 15,
"malicious_count": 0,
"assessed_package": "pypi:pypi-simple@1.8.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "beautifulsoup4",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "~= 4.5"
},
{
"name": "mailbits",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "~= 0.2"
},
{
"name": "packaging",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">= 20"
},
{
"name": "pydantic",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "~= 2.0"
},
{
"name": "requests",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "~= 2.20"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "beautifulsoup4",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "mailbits",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "pydantic",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "sphinx",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "sphinx-copybutton",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "sphinx-rtd-theme",
"direct": false,
"version": null,
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 8,
"direct_count": 5,
"indirect_count": 3
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 35,
"open_issues": 1,
"closed_ratio": 0.909,
"closed_issues": 10,
"closed_unmerged_prs": 16
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "jwodder",
"commits": 283,
"avatar_url": "https://avatars.githubusercontent.com/u/98207?v=4"
},
{
"type": "User",
"login": "thatch",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/49834?v=4"
},
{
"type": "User",
"login": "warsaw",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/210184?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.969
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"test.yml"
],
"has_docs_dir": true,
"linter_configs": [
"tox.ini"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/14 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 7 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "cac12ffef4ffca30c4917bb5783ef13098ac4b77",
"ran_at": "2026-07-26T17:28:55Z",
"aggregate_score": 5.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-26T08:29:57Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-20T12:46:38Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 58,
"created_at": "2026-05-01T20:12:41Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/jwodder/pypi-simple",
"host": "github.com",
"name": "pypi-simple",
"owner": "jwodder"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"security": 62,
"vitality": 64,
"community": 55,
"governance": 58,
"engineering": 90
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 64,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 31,
"human_commit_share": 0.87,
"days_since_last_push": 6,
"active_weeks_last_year": 14
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "14/52 weeks with commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 14
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "31 commits in the last year",
"points": 13.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 31
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "moderate",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"releases_count": 21,
"latest_release_tag": "v1.8.0",
"releases_from_tags": false,
"days_since_latest_release": 326,
"mean_days_between_releases": 103
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "21 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 21
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 326 days ago",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 326
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~103 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 103
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 48,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 48 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 48
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 55,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"forks": 12,
"stars": 43,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "43 stars",
"points": 26.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 43
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "12 forks",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 12
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"packages": [
"pypi-simple"
],
"dependents": null,
"ecosystems": "pypi",
"total_downloads": null,
"monthly_downloads": 342629
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "342,629 downloads/month across pypi",
"points": 73.8,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 342629,
"ecosystems": "pypi"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 58,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.969
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 97% of commits",
"points": 0.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 97
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"merged_prs": 35,
"open_issues": 1,
"closed_issues": 10,
"issue_closed_ratio": 0.909,
"closed_unmerged_prs": 16
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "91% of issues closed",
"points": 42.5,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 91
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "35/51 decided PRs merged",
"points": 26.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 35,
"decided": 51
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/14 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"followers": 74,
"owner_type": "User",
"is_verified": null,
"owner_login": "jwodder",
"public_repos": 172,
"account_age_days": 6242
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "74 followers of jwodder",
"points": 13.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 74,
"login": "jwodder"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "172 public repos, account ~17 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 172
}
},
{
"code": "account_age_years",
"params": {
"years": 17
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 91,
"inputs": {
"packages": [
"pypi-simple"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 326
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 326 days ago",
"points": 26,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 326
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "21 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 21
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 90,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "tox.ini",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tox.ini"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"pypi",
"pep503",
"simple-repository-api",
"packages",
"pip",
"python",
"available-on-pypi"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "7 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 7
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 62,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 52,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/14 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:pypi-simple@1.8.0 runtime dependency closure — what installing the published package pulls in — 15 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:pypi-simple@1.8.0",
"assessed": 15
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 15,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 15,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 47,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 19,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.356,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "31 of 87 human commits state their intent (structured subject or explanatory body)",
"points": 19,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 31,
"sampled": 87
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"src/pypi_simple/py.typed"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.13
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "tox.ini",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tox.ini"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "src/pypi_simple/py.typed",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "src/pypi_simple/py.typed"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "13 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 13,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 41594,
"source_files_sampled": 20,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (src/pypi_simple/py.typed)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "src/pypi_simple/py.typed",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/20 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 20,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-26T17:29:10.667620Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/jwodder/pypi-simple.svg",
"full_name": "jwodder/pypi-simple",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — PyPI.