Public record
Software health reportschema 0.34.0 · metrics 2.10.0 · 2026-10-13 06:38 UTC

owid / etl

A compute graph for loading and transforming OWID's data

PythonMIT★ 159 stars⑂ 30 forkssince Sep 2021View on GitHub ↗
KindCommand-line toolLibraryMCP serverNetwork servicehow this is determined

owid/etl holds a health index of 84 out of 100, placing it in the Excellent band. It scores highest on Engineering Quality (92/100) and lowest on Security (55/100). It was last updated today. 2 contributors account for most of its recent work.

84
overall / 100
Excellent

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.

84
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

The weighted overall 71 is calibrated to 84 on the published index scale (record calibration 2026-08-02).

Ownership

Our World in DataOrganization · verified domain
2,200 followers53 public repossince Sep 2015

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publishTags
PyPIowid-repack0.1.121,920110 days ago—
PyPIowid-catalog1.2.82,359430 days ago—
PyPIowid-datautils0.6.12-110 days agodata-cleaningdata-processingdata-utilsour-world-in-data
npmchart-previewpoints to another repo — not scored1.3.02987249 days agoclone-herochartpreviewrhythm-gamethree.js3dvisualization

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

60Moderate · 21% of overall

Development activity

100Exceptional
How it's scored
36/36Push recency — last push 0 days ago
36/36Commit cadence — 52/52 weeks with commits
18/18Commit volume — 3,470 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year3,470
human_commit_share0.99
days_since_last_push0
active_weeks_last_year52
How it's scored
0/27Ships releases — no releases published
0/36Release recency — no releases
0/27Release cadence — no releases
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count0
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

58Moderate · 17% of overall
How it's scored
35.7/60Stars — 159 stars
12.2/25Forks — 30 forks
1.7/15Watchers — 3 watchers
Inputs used
forks30
stars159
watchers3
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (MIT)
18/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
readme_badges4
has_contributingyes
has_issue_templateno
has_code_of_conductno
readme_badge_servicesreadthedocs.org, shields.io
has_pull_request_templateno
How it's scored
45/80Monthly downloads — 2,359 downloads/month across pypi
0/20Registry dependents — not reported by this ecosystem
Inputs used
packagesowid-catalog
dependents—
ecosystemspypi
total_downloads—
monthly_downloads2,359
unverified_packages_excludedowid-repack, owid-datautils
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

82Excellent · 23% of overall
How it's scored
25.2/54Bus factor — 2 contributor(s) cover half of all commits
12.2/22.5Commit distribution — top contributor authored 46% of commits
13.5/13.5Contributor breadth — 30 contributors
10/10OpenSSF Scorecard: Contributors — project has 6 contributing companies or organizations
Inputs used
bus_factor2
contributors_sampled30
top_contributor_share0.458
How it's scored
40.5/42Issue resolution — 96% of issues closed
25/30PR acceptance — 5,112/6,146 decided PRs merged
0/13Newcomer PR acceptance — no first-time contributor's PR decided in 30d
1.5/15OpenSSF Scorecard: Code-Review — Found 2/14 approved changesets -- score normalized to 1
Inputs used
merged_prs5,112
open_issues28
closed_issues782
prs_merged_7d37
prs_decided_7d38
prs_merged_30d47
prs_decided_30d49
issue_closed_ratio0.965
closed_unmerged_prs1,034
first_time_authors_30d0
first_time_prs_merged_30d0
first_time_prs_decided_30d0
Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.
How it's scored
30/30Ownership backing — organization-owned
20/20Verified domain
24/25Owner reach — 2,200 followers of owid
24.6/25Track record — 53 public repos, account ~11 yr old
Inputs used
followers2,200
owner_typeOrganization
is_verifiedyes
owner_loginowid
public_repos53
account_age_days4,052

Package maintenance

100Exceptional
How it's scored
25/25Published & resolvable — 3 package(s) on pypi
35/35Publish recency — latest publish 0 days ago
20/20Version history — 43 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesowid-repack, owid-catalog, owid-datautils
ecosystemspypi
any_deprecatedno
min_days_since_publish0

Engineering Quality

Are baseline engineering and documentation practices in place?

92Excellent · 19% of overall
How it's scored
24/24CI workflows — 8 workflow(s)
24/24Tests present
16/16Linter config — eslint.config.mjs, lib/catalog/pyproject.toml ([tool.ruff]), lib/datautils/pyproject.toml ([tool.ruff]), lib/owl/pyproject.toml ([tool.ruff]), lib/repack/pyproject.toml ([tool.ruff]), pyproject.toml ([tool.ruff])
9.6/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 9 out of 9 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configyes

Documentation

90Excellent
How it's scored
30/30README
25/25Documentation directory
15/15Documentation / homepage site — https://docs.owid.io/projects/etl
10/10Repository description
0/10Topics
10/10Wiki
Inputs used
topics—
has_wikiyes
homepagehttps://docs.owid.io/projects/etl
docs_sitehttps://docs.owid.io/projects/etl
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

55Moderate · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — no data
2.5/2.5CI-Tests — 9 out of 9 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0.8/7.5Code-Review — Found 2/14 approved changesets -- score normalized to 1
2.5/2.5Contributors — project has 6 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — no data
3.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 15 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate5.2
Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.
How it's scored
8.7/35Direct dependencies free of known advisories — 2 affected: fsspec 2026.4.0 (high 8.8), pydantic-ai-slim 1.106.0 (high 7.6)
0/25Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
40/40No advisories left outstanding — no advisory has been public longer than 90 days
Inputs used
sourceosv
advisories16
affected_packages8
assessed_packages958
unassessed_packages0
affected_by_severitycritical 1, high 5, moderate 2
direct_affected_packages2
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 958 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.

85Excellent · 4% of overall
How it's scored
45/45Agent instructions — .github/instructions/copilot-instructions.md, .github/instructions/garden-metadata.instructions.md, .github/instructions/github-actions.instructions.md, .github/instructions/snapshot-metadata.instructions.md, AGENTS.md, CLAUDE.md, lib/catalog/CLAUDE.md
15/15Machine-readable docs (llms.txt) — llms.txt present
26.9/40Legible commit history — 50 of 99 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtyes
llms_txt_url—
legible_history_share0.505
agent_instruction_files.github/instructions/copilot-instructions.md, .github/instructions/garden-metadata.instructions.md, .github/instructions/github-actions.instructions.md, .github/instructions/snapshot-metadata.instructions.md, AGENTS.md, CLAUDE.md, lib/catalog/CLAUDE.md
agent_instruction_max_bytes37,071
How it's scored
18/18One-command bootstrap — Makefile, lib/catalog/Makefile, lib/datautils/Makefile, lib/datautils/docs/Makefile, lib/owl/Makefile, lib/repack/Makefile
22/22Automated tests
11/11Lint / format config — eslint.config.mjs, lib/catalog/pyproject.toml ([tool.ruff]), lib/datautils/pyproject.toml ([tool.ruff]), lib/owl/pyproject.toml ([tool.ruff]), lib/repack/pyproject.toml ([tool.ruff]), pyproject.toml ([tool.ruff])
11/11Static type checking — vscode_extensions/chart-preview/tsconfig.json, vscode_extensions/clickable-dag-steps/tsconfig.json, vscode_extensions/compare-previous-version/tsconfig.json, vscode_extensions/detect-outdated-practices/tsconfig.json, vscode_extensions/dod-syntax/tsconfig.json, vscode_extensions/find-latest-etl-step/tsconfig.json, vscode_extensions/meta-yaml-hover/tsconfig.json, vscode_extensions/run-until-cursor/tsconfig.json
10/10Reproducible environment — lockfile
10/10Demonstrated agent practice — 48 of the last 100 commits agent-authored or agent-credited
5/8Automated maintenance — dependency automation configured, none observed in the sampled commits
7/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7
Inputs used
has_nixno
has_testsyes
lockfilespackage-lock.json, uv.lock
has_dockerfileno
typed_languageno
bootstrap_filesMakefile, lib/catalog/Makefile, lib/datautils/Makefile, lib/datautils/docs/Makefile, lib/owl/Makefile, lib/repack/Makefile
has_devcontainerno
has_linter_configyes
typecheck_configsvscode_extensions/chart-preview/tsconfig.json, vscode_extensions/clickable-dag-steps/tsconfig.json, vscode_extensions/compare-previous-version/tsconfig.json, vscode_extensions/detect-outdated-practices/tsconfig.json, vscode_extensions/dod-syntax/tsconfig.json, vscode_extensions/find-latest-etl-step/tsconfig.json, vscode_extensions/meta-yaml-hover/tsconfig.json, vscode_extensions/run-until-cursor/tsconfig.json
agent_commit_share0.48
toolchain_manifests—
dependency_bot_commit_share0
How it's scored
27/45Type-checkable code — Python with type-check config (vscode_extensions/chart-preview/tsconfig.json, vscode_extensions/clickable-dag-steps/tsconfig.json, vscode_extensions/compare-previous-version/tsconfig.json, vscode_extensions/detect-outdated-practices/tsconfig.json, vscode_extensions/dod-syntax/tsconfig.json, vscode_extensions/find-latest-etl-step/tsconfig.json, vscode_extensions/meta-yaml-hover/tsconfig.json, vscode_extensions/run-until-cursor/tsconfig.json)
54.5/55Manageable file sizes — 46/5,578 source files over 60KB
Inputs used
primary_languagePython
largest_source_bytes255,373
source_files_sampled5,578
oversized_source_files46
How it's scored
0/40API schema (OpenAPI/GraphQL/proto)
20/20MCP server
40/40Runnable examples — notebooks
Inputs used
example_dirsnotebooks
has_mcp_signalyes
api_schema_files—
interfaces_expected_ofnetwork-service

Key facts

159GitHub stars
30contributors
3,470commits, last 12 months
0days since last push
0releases
2bus factor
28open issues
PyPIpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • Could not fetch pypi package 'etl' from its registry
  • Could not fetch pypi package 'owid-owl' from its registry
  • pypi download statistics for 'owid-datautils' unavailable this scan (stats endpoint failed after retries); adoption may be under-evidenced
  • Could not fetch npm package 'dod-syntax' from its registry
  • npm package 'chart-preview' points at a different repository (https://github.com/Geomitron/chart-preview); excluded from ecosystem scoring
  • Could not fetch npm package 'meta-yaml-hover' from its registry
  • Could not fetch npm package 'run-until-cursor' from its registry
  • deps.dev does not index pypi:owid-repack@0.1.12; advisories assessed against the repository dependency graph instead

More detail

Star and fork history 0 ★ / 30 ⇿
0Stars
30Forks

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

0510152025302912022-022024-042026-06

Each point covers 4 days.

OpenSSF Scorecard 5.2 / 10
5.2aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-10-13 06:37 UTC

10Binary-Artifactsno binaries found in the repo
n/aBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests9 out of 9 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
1Code-ReviewFound 2/14 approved changesets -- score normalized to 1
10Contributorsproject has 6 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
n/aPackagingpackaging workflow not detected
7Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 7
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities15 existing vulnerabilities detected
Direct dependencies 141
RegistryPackageVersion constraintManifest
PyPIowid-owl—pyproject.toml
PyPIclick>=8.0.1pyproject.toml
PyPIPyYAML>=6.0.1pyproject.toml
PyPIjupyterlab>=4.6.4pyproject.toml
PyPISPARQLWrapper>=1.8.5pyproject.toml
PyPIopenpyxl>=3.0.9pyproject.toml
PyPIsh>=2.2.4pyproject.toml
PyPIUnidecode>=1.3.2pyproject.toml
PyPIpython-dotenv>=0.19.0pyproject.toml
PyPIregex>=2022.1.18pyproject.toml
PyPIwikipedia>=1.4.0pyproject.toml
PyPInumpy>=2.3.3pyproject.toml
PyPIpydantic>=1.9.0pyproject.toml
PyPIstructlog>=21.5.0pyproject.toml
PyPIrich>=12.1.0pyproject.toml
PyPIrich-click>=1.9.4pyproject.toml
PyPItenacity>=8.0.1pyproject.toml
PyPIsimplejson>=3.17.6pyproject.toml
PyPIxlrd>=2.0.1pyproject.toml
PyPIpypdf>=6.19.0pyproject.toml
PyPIruamel.yaml>=0.17.21pyproject.toml
PyPIgitpython>=3.1.62pyproject.toml
PyPIrapidfuzz>=2.13.7pyproject.toml
PyPIfsspec>=2022.11.0pyproject.toml
PyPIopenai>=1.3.6pyproject.toml
PyPIpdfplumber>=0.9.0pyproject.toml
PyPIpyhumps>=3.8.0pyproject.toml
PyPIwbgapi>=1.0.12pyproject.toml
PyPIodfpy>=1.4.1pyproject.toml
PyPIworld-bank-data>=0.1.3pyproject.toml
PyPIquestionary>=2.0.0pyproject.toml
PyPItyping-extensions>=4.7.1pyproject.toml
PyPIscipy>=1.16.2pyproject.toml
PyPIselenium>=4.15.1pyproject.toml
PyPIwebdriver-manager>=4.0.1pyproject.toml
PyPIgeopandas>=1.1.1pyproject.toml
PyPIshapely>=2.0.3pyproject.toml
PyPIcdsapi>=0.7.4pyproject.toml
PyPIrioxarray>=0.15.1pyproject.toml
PyPIhtml2text>=2020.1.16pyproject.toml
PyPIpygithub>=2.3.0pyproject.toml
PyPIpandas==3.0.6pyproject.toml
PyPIpytz>=2024.1pyproject.toml
PyPIsqlalchemy>=2.0.30pyproject.toml
PyPIpymysql>=1.1.1pyproject.toml
PyPItiktoken>=0.7.0pyproject.toml
PyPIearthengine-api>=0.1.411pyproject.toml
PyPIpython-docx>=1.1.2pyproject.toml
PyPIh5netcdf>=1.3.0pyproject.toml
PyPIfrictionless>=5.0.3pyproject.toml
PyPIowid-catalog—pyproject.toml
PyPIowid-datautils—pyproject.toml
PyPIowid-repack—pyproject.toml
PyPIdeprecated>=1.2.14pyproject.toml
PyPIscikit-learn>=1.5.2pyproject.toml
PyPIgeopy>=2.5.0pyproject.toml
PyPIpy7zr>=1.1.3pyproject.toml
PyPIpyreadr>=0.5.2pyproject.toml
PyPIsentry-sdk>=2.43.0pyproject.toml
PyPIfastjsonschema>=2.21.1pyproject.toml
PyPImediacloud>=4.4.0pyproject.toml
PyPIfastmcp>=3.2.0pyproject.toml
PyPIpyproj>=3.7.2pyproject.toml
PyPIpydantic-ai-slim>=1.99.0pyproject.toml
PyPIcodespell>=2.4.1pyproject.toml
PyPIzensical>=0.0.15pyproject.toml
PyPIpandas-gbq>=0.29.2pyproject.toml
PyPItomli>=2.2.1pyproject.toml
PyPIgenai-prices>=0.0.50pyproject.toml
PyPImarshmallow>=3.26.2pyproject.toml
PyPIbrotli>=1.2.0pyproject.toml
PyPIpyopenssl>=26.0.0pyproject.toml
PyPIgoogle-genai>=1.59.0pyproject.toml
PyPIh5py>=3.15.1pyproject.toml
PyPIhtml5lib>=1.1pyproject.toml
PyPIrequests>=2.32.5pyproject.toml
PyPIchardet<6.0.0pyproject.toml
PyPIpandas>=2.2.3,<4lib/catalog/pyproject.toml
PyPIjsonschema>=3.2.0lib/catalog/pyproject.toml
PyPIpyarrow>=10.0.1lib/catalog/pyproject.toml
PyPIipdb>=0.13.9lib/catalog/pyproject.toml
PyPIrequests>=2.26.0lib/catalog/pyproject.toml
PyPIUnidecode>=1.3.4lib/catalog/pyproject.toml
PyPIPyYAML>=6.0.1lib/catalog/pyproject.toml
PyPIstructlog>=21.5.0lib/catalog/pyproject.toml
PyPIdynamic-yaml>=1.3.5lib/catalog/pyproject.toml
PyPImistune>=3.3.0lib/catalog/pyproject.toml
PyPIdataclasses-json>=0.6.7lib/catalog/pyproject.toml
PyPIpyreadr>=0.5.0lib/catalog/pyproject.toml
PyPIowid-datautils>=0.6.12lib/catalog/pyproject.toml
PyPIowid-repack>=0.1.12lib/catalog/pyproject.toml
PyPIjinja2>=3.1.6lib/catalog/pyproject.toml
PyPItyping-extensions>=4.7.1lib/catalog/pyproject.toml
PyPIrdata>=0.11.2lib/catalog/pyproject.toml
PyPIpydantic>=2.0.0lib/catalog/pyproject.toml
PyPIDeprecated>=1.2.14lib/catalog/pyproject.toml
PyPIrapidfuzz>=3.14.3lib/catalog/pyproject.toml
PyPItqdm>=4.66.0lib/catalog/pyproject.toml
PyPIplatformdirs>=4.0.0lib/catalog/pyproject.toml
PyPImarshmallow>=3.26.2lib/catalog/pyproject.toml
PyPIbrotli>=1.2.0lib/catalog/pyproject.toml
PyPIurllib3>=2.8.0lib/catalog/pyproject.toml
PyPIopenpyxl>=3.0.9lib/catalog/pyproject.toml
PyPIpandas>=2.2.3,<4lib/datautils/pyproject.toml
PyPIboto3>=1.38.23lib/datautils/pyproject.toml
PyPIstructlog>=21.5.0lib/datautils/pyproject.toml
PyPIcolorama>=0.4.4lib/datautils/pyproject.toml
PyPIgdown>=5.2.2lib/datautils/pyproject.toml
PyPIgsheets>=0.6.1lib/datautils/pyproject.toml
PyPIpydrive2>=1.15.0lib/datautils/pyproject.toml
PyPIpyarrow>=18.0.0lib/datautils/pyproject.toml
PyPIurllib3>=2.8.0,<3lib/datautils/pyproject.toml
PyPIclick>=8.1.7lib/datautils/pyproject.toml
PyPIpy7zr>=1.1.3lib/datautils/pyproject.toml
PyPIcryptography>=50.0.0lib/datautils/pyproject.toml
PyPIprotobuf>=6.33.4lib/datautils/pyproject.toml
PyPIbrotli>=1.2.0lib/datautils/pyproject.toml
PyPItornado>=6.5.9lib/datautils/pyproject.toml
PyPIpyasn1>=0.6.4lib/datautils/pyproject.toml
PyPIrequests>=2.32.5lib/datautils/pyproject.toml
PyPIjinja2>=3.1.6lib/datautils/pyproject.toml
PyPIpyopenssl>=26.0.0lib/datautils/pyproject.toml
PyPIclick>=8.0lib/owl/pyproject.toml
PyPIgraphviz>=0.21lib/owl/pyproject.toml
PyPIowid-catalog—lib/owl/pyproject.toml
PyPIpandas>=2.2lib/owl/pyproject.toml
PyPIpyarrow>=16.0lib/owl/pyproject.toml
PyPIpython-dotenv>=1.0lib/owl/pyproject.toml
PyPIpyyaml>=6.0lib/owl/pyproject.toml
PyPIrich>=12.1.0lib/owl/pyproject.toml
PyPIsqlalchemy>=2.0.30lib/owl/pyproject.toml
PyPItomli>=2.0lib/owl/pyproject.toml
PyPItqdm>=4.66.0lib/owl/pyproject.toml
PyPInumpy>=1.24.0lib/repack/pyproject.toml
PyPIpandas>=2.2.3,<4lib/repack/pyproject.toml
PyPIpyarrow>=18.0.0lib/repack/pyproject.toml
npmjs-yaml^4.3.2vscode_extensions/clickable-dag-steps/package.json
npmignore^6.0.2vscode_extensions/compare-previous-version/package.json
npmignore^6.0.2vscode_extensions/find-latest-etl-step/package.json
npmlodash^4.18.1vscode_extensions/find-latest-etl-step/package.json
npmjs-yaml^4.3.2vscode_extensions/meta-yaml-hover/package.json
All dependencies 958

Full resolved dependency set from the GitHub dependency graph: 125 direct and 833 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
npmignore5.3.2direct
npmignore6.0.2direct
npmignore7.0.5direct
npmjs-yaml4.3.2direct
npmlodash4.18.1direct
PyPIboto31.42.73direct
PyPIboto31.43.18direct
PyPIboto31.43.6direct
PyPIbrotli1.2.0direct
PyPIcdsapi0.7.7direct
PyPIchardet5.2.0direct
PyPIclick8.3.1direct
PyPIclick8.3.3direct
PyPIclick8.4.1direct
PyPIcodespell2.4.2direct
PyPIcolorama0.4.6direct
PyPIcryptography50.0.0direct
PyPIdataclasses-json0.6.7direct
PyPIdeprecated1.3.1direct
PyPIdynamic-yaml2.0.0direct
PyPIearthengine-api1.7.26direct
PyPIfastjsonschema2.21.2direct
PyPIfastmcp4.0.10direct
PyPIfrictionless5.18.1direct
PyPIfsspec2026.4.0direct
PyPIgdown6.0.0direct
PyPIgdown6.1.0direct
PyPIgenai-prices0.0.59direct
PyPIgeopandas1.1.3direct
PyPIgeopy2.5.0direct
PyPIgitpython3.1.62direct
PyPIgoogle-genai2.2.0direct
PyPIgraphviz0.21direct
PyPIgsheets0.6.1direct
PyPIh5netcdf1.8.1direct
PyPIh5py3.16.0direct
PyPIhtml2text2025.4.15direct
PyPIhtml5lib1.1direct
PyPIipdb0.13.13direct
PyPIjinja23.1.6direct
PyPIjsonschema4.26.0direct
PyPIjupyterlab4.6.4direct
PyPImarshmallow3.26.2direct
PyPImediacloud5.0.0direct
PyPImistune3.3.3direct
PyPInumpy2.4.3direct
PyPInumpy2.4.4direct
PyPInumpy2.4.6direct
PyPIodfpy1.4.1direct
PyPIopenai2.36.0direct
PyPIopenpyxl3.1.5direct
PyPIowid-catalog1.2.8direct
PyPIowid-catalog1.2.9direct
PyPIowid-datautils0.6.12direct
PyPIowid-datautils0.6.13direct
PyPIowid-owl0.1.1direct
PyPIowid-repack0.1.12direct
PyPIowid-repack0.1.13direct
PyPIpandas2.3.3direct
PyPIpandas3.0.6direct
PyPIpandas-gbq0.35.0direct
PyPIpdfplumber0.11.9direct
PyPIplatformdirs4.10.0direct
PyPIplatformdirs4.9.4direct
PyPIplatformdirs4.9.6direct
PyPIprotobuf7.34.1direct
PyPIprotobuf7.35.0direct
PyPIpy7zr1.1.3direct
PyPIpyarrow23.0.1direct
PyPIpyarrow24.0.0direct
PyPIpyasn10.6.4direct
PyPIpydantic2.12.5direct
PyPIpydantic2.13.4direct
PyPIpydantic-ai-slim1.106.0direct
PyPIpydrive21.21.1direct
PyPIpygithub2.9.1direct
PyPIpyhumps3.8.0direct
PyPIpymysql1.1.3direct
PyPIpyopenssl26.4.0direct
PyPIpypdf6.19.0direct
PyPIpyproj3.7.2direct
PyPIpyreadr0.5.4direct
PyPIpyreadr0.5.6direct
PyPIpython-docx1.2.0direct
PyPIpython-dotenv1.2.2direct
PyPIpytz2026.2direct
PyPIpyyaml6.0.3direct
PyPIquestionary2.1.1direct
PyPIrapidfuzz3.14.3direct
PyPIrapidfuzz3.14.5direct
PyPIrdata1.0.0direct
PyPIregex2026.5.9direct
PyPIrequests2.34.0direct
PyPIrequests2.34.2direct
PyPIrich15.0.0direct
PyPIrich-click1.9.7direct
PyPIrioxarray0.19.0direct
PyPIrioxarray0.22.0direct
PyPIruamel-yaml0.19.1direct
PyPIscikit-learn1.8.0direct
PyPIscipy1.17.1direct
PyPIselenium4.44.0direct
PyPIsentry-sdk2.60.0direct
PyPIsh2.3.0direct
PyPIshapely2.1.2direct
PyPIsimplejson4.1.1direct
PyPIsparqlwrapper2.0.0direct
PyPIsqlalchemy2.0.49direct
PyPIsqlalchemy2.0.50direct
PyPIstructlog25.5.0direct
PyPItenacity9.1.4direct
PyPItiktoken0.12.0direct
PyPItomli2.4.0direct
PyPItomli2.4.1direct
PyPItornado6.5.9direct
PyPItqdm4.67.3direct
PyPItyping-extensions4.15.0direct
PyPIunidecode1.4.0direct
PyPIurllib32.8.0direct
PyPIwbgapi1.0.14direct
PyPIwebdriver-manager4.0.2direct
PyPIwikipedia1.4.0direct
PyPIworld-bank-data0.1.4direct
PyPIxlrd2.0.2direct
PyPIzensical0.0.41direct
npm@bcoe/v8-coverage0.2.3indirect
npm@esbuild/aix-ppc640.28.1indirect
npm@esbuild/android-arm0.28.1indirect
npm@esbuild/android-arm640.28.1indirect
npm@esbuild/android-x640.28.1indirect
npm@esbuild/darwin-arm640.28.1indirect
npm@esbuild/darwin-x640.28.1indirect
npm@esbuild/freebsd-arm640.28.1indirect
npm@esbuild/freebsd-x640.28.1indirect
npm@esbuild/linux-arm0.28.1indirect
npm@esbuild/linux-arm640.28.1indirect
npm@esbuild/linux-ia320.28.1indirect
npm@esbuild/linux-loong640.28.1indirect
npm@esbuild/linux-mips64el0.28.1indirect
npm@esbuild/linux-ppc640.28.1indirect
npm@esbuild/linux-riscv640.28.1indirect
npm@esbuild/linux-s390x0.28.1indirect
npm@esbuild/linux-x640.28.1indirect
npm@esbuild/netbsd-arm640.28.1indirect
npm@esbuild/netbsd-x640.28.1indirect
npm@esbuild/openbsd-arm640.28.1indirect
npm@esbuild/openbsd-x640.28.1indirect
npm@esbuild/openharmony-arm640.28.1indirect
npm@esbuild/sunos-x640.28.1indirect
npm@esbuild/win32-arm640.28.1indirect
npm@esbuild/win32-ia320.28.1indirect
npm@esbuild/win32-x640.28.1indirect
npm@eslint-community/eslint-utils4.9.0indirect
npm@eslint-community/eslint-utils4.9.1indirect
npm@eslint-community/regexpp4.12.2indirect
npm@eslint/config-array0.21.1indirect
npm@eslint/config-array0.21.2indirect
npm@eslint/config-helpers0.4.2indirect
npm@eslint/core0.17.0indirect
npm@eslint/eslintrc3.3.1indirect
npm@eslint/eslintrc3.3.5indirect
npm@eslint/js9.39.1indirect
npm@eslint/js9.39.4indirect
npm@eslint/object-schema2.1.7indirect
npm@eslint/plugin-kit0.4.1indirect
npm@humanfs/core0.19.2indirect
npm@humanfs/node0.16.8indirect
npm@humanfs/types0.15.0indirect
npm@humanwhocodes/module-importer1.0.1indirect
npm@humanwhocodes/retry0.4.3indirect
npm@isaacs/cliui8.0.2indirect
npm@istanbuljs/schema0.1.3indirect
npm@jridgewell/resolve-uri3.1.2indirect
npm@jridgewell/sourcemap-codec1.5.5indirect
npm@jridgewell/trace-mapping0.3.31indirect
npm@nodelib/fs.scandir2.1.5indirect
npm@nodelib/fs.stat2.0.5indirect
npm@nodelib/fs.walk1.2.8indirect
npm@pkgjs/parseargs0.11.0indirect
npm@types/estree1.0.8indirect
npm@types/istanbul-lib-coverage2.0.6indirect
npm@types/js-yaml4.0.9indirect
npm@types/json-schema7.0.15indirect
npm@types/lodash4.17.24indirect
npm@types/mocha10.0.10indirect
npm@types/node20.19.25indirect
npm@types/node20.19.33indirect
npm@types/node20.19.37indirect
npm@types/node20.19.39indirect
npm@types/vscode1.106.1indirect
npm@types/vscode1.109.0indirect
npm@types/vscode1.110.0indirect
npm@types/vscode1.116.0indirect
npm@types/vscode1.97.0indirect
npm@typescript-eslint/eslint-plugin8.47.0indirect
npm@typescript-eslint/eslint-plugin8.57.1indirect
npm@typescript-eslint/eslint-plugin8.59.0indirect
npm@typescript-eslint/parser8.47.0indirect
npm@typescript-eslint/parser8.57.1indirect
npm@typescript-eslint/parser8.59.0indirect
npm@typescript-eslint/project-service8.47.0indirect
npm@typescript-eslint/project-service8.57.1indirect
npm@typescript-eslint/project-service8.59.0indirect
npm@typescript-eslint/scope-manager8.47.0indirect
npm@typescript-eslint/scope-manager8.57.1indirect
npm@typescript-eslint/scope-manager8.59.0indirect
npm@typescript-eslint/tsconfig-utils8.47.0indirect
npm@typescript-eslint/tsconfig-utils8.57.1indirect
npm@typescript-eslint/tsconfig-utils8.59.0indirect
npm@typescript-eslint/type-utils8.47.0indirect
npm@typescript-eslint/type-utils8.57.1indirect
npm@typescript-eslint/type-utils8.59.0indirect
npm@typescript-eslint/types8.47.0indirect
npm@typescript-eslint/types8.57.1indirect
npm@typescript-eslint/types8.59.0indirect
npm@typescript-eslint/typescript-estree8.47.0indirect
npm@typescript-eslint/typescript-estree8.57.1indirect
npm@typescript-eslint/typescript-estree8.59.0indirect
npm@typescript-eslint/utils8.47.0indirect
npm@typescript-eslint/utils8.57.1indirect
npm@typescript-eslint/utils8.59.0indirect
npm@typescript-eslint/visitor-keys8.47.0indirect
npm@typescript-eslint/visitor-keys8.57.1indirect
npm@typescript-eslint/visitor-keys8.59.0indirect
npm@vscode/test-cli0.0.10indirect
npm@vscode/test-electron2.5.2indirect
npmacorn8.15.0indirect
npmacorn8.16.0indirect
npmacorn-jsx5.3.2indirect
npmagent-base7.1.4indirect
npmajv6.12.6indirect
npmajv6.14.0indirect
npmajv6.15.0indirect
npmansi-colors4.1.3indirect
npmansi-regex5.0.1indirect
npmansi-regex6.2.2indirect
npmansi-styles3.2.1indirect
npmansi-styles4.3.0indirect
npmansi-styles6.2.3indirect
npmanymatch3.1.3indirect
npmargparse2.0.1indirect
npmarray-buffer-byte-length1.0.2indirect
npmarraybuffer.prototype.slice1.0.4indirect
npmasync-function1.0.0indirect
npmavailable-typed-arrays1.0.7indirect
npmbalanced-match1.0.2indirect
npmbalanced-match4.0.4indirect
npmbinary-extensions2.3.0indirect
npmbrace-expansion1.1.21indirect
npmbrace-expansion2.1.7indirect
npmbrace-expansion5.0.12indirect
npmbraces3.0.3indirect
npmbrowser-stdout1.3.1indirect
npmc89.1.0indirect
npmcall-bind1.0.8indirect
npmcall-bind1.0.9indirect
npmcall-bind-apply-helpers1.0.2indirect
npmcall-bound1.0.4indirect
npmcallsites3.1.0indirect
npmcamelcase6.3.0indirect
npmchalk2.4.2indirect
npmchalk4.1.2indirect
npmchalk5.6.2indirect
npmchokidar3.6.0indirect
npmcli-cursor5.0.0indirect
npmcli-spinners2.9.2indirect
npmcliui7.0.4indirect
npmcliui8.0.1indirect
npmcolor-convert1.9.3indirect
npmcolor-convert2.0.1indirect
npmcolor-name1.1.3indirect
npmcolor-name1.1.4indirect
npmconcat-map0.0.1indirect
npmconvert-source-map2.0.0indirect
npmcore-util-is1.0.3indirect
npmcross-spawn6.0.6indirect
npmcross-spawn7.0.6indirect
npmdata-view-buffer1.0.2indirect
npmdata-view-byte-length1.0.2indirect
npmdata-view-byte-offset1.0.1indirect
npmdebug4.4.3indirect
npmdecamelize4.0.0indirect
npmdeep-is0.1.4indirect
npmdefine-data-property1.1.4indirect
npmdefine-properties1.2.1indirect
npmdiff5.2.0indirect
npmdiff5.2.2indirect
npmdunder-proto1.0.1indirect
npmeastasianwidth0.2.0indirect
npmemoji-regex10.6.0indirect
npmemoji-regex8.0.0indirect
npmemoji-regex9.2.2indirect
npmenhanced-resolve5.18.3indirect
npmenhanced-resolve5.20.1indirect
npmerror-ex1.3.4indirect
npmes-abstract1.24.0indirect
npmes-abstract1.24.1indirect
npmes-abstract1.24.2indirect
npmes-define-property1.0.1indirect
npmes-errors1.3.0indirect
npmes-object-atoms1.1.1indirect
npmes-set-tostringtag2.1.0indirect
npmes-to-primitive1.3.0indirect
npmesbuild0.28.1indirect
npmescalade3.2.0indirect
npmescape-string-regexp1.0.5indirect
npmescape-string-regexp4.0.0indirect
npmeslint9.39.1indirect
npmeslint9.39.4indirect
npmeslint-scope8.4.0indirect
npmeslint-visitor-keys3.4.3indirect
npmeslint-visitor-keys4.2.1indirect
npmeslint-visitor-keys5.0.1indirect
npmespree10.4.0indirect
npmesquery1.6.0indirect
npmesquery1.7.0indirect
npmesrecurse4.3.0indirect
npmestraverse5.3.0indirect
npmesutils2.0.3indirect
npmfast-deep-equal3.1.3indirect
npmfast-glob3.3.3indirect
npmfast-json-stable-stringify2.1.0indirect
npmfast-levenshtein2.0.6indirect
npmfastq1.19.1indirect
npmfdir6.5.0indirect
npmfile-entry-cache8.0.0indirect
npmfill-range7.1.1indirect
npmfind-up5.0.0indirect
npmflat5.0.2indirect
npmflat-cache4.0.1indirect
npmflatted3.4.2indirect
npmfor-each0.3.5indirect
npmforeground-child3.3.1indirect
npmfs.realpath1.0.0indirect
npmfsevents2.3.3indirect
npmfunction-bind1.1.2indirect
npmfunction.prototype.name1.1.8indirect
npmfunctions-have-names1.2.3indirect
npmgenerator-function2.0.1indirect
npmget-caller-file2.0.5indirect
npmget-east-asian-width1.4.0indirect
npmget-east-asian-width1.5.0indirect
npmget-intrinsic1.3.0indirect
npmget-proto1.0.1indirect
npmget-symbol-description1.1.0indirect
npmglob10.5.0indirect
npmglob7.2.3indirect
npmglob8.1.0indirect
npmglob-parent5.1.2indirect
npmglob-parent6.0.2indirect
npmglobals14.0.0indirect
npmglobalthis1.0.4indirect
npmgopd1.2.0indirect
npmgraceful-fs4.2.11indirect
npmgraphemer1.4.0indirect
npmhas-bigints1.1.0indirect
npmhas-flag3.0.0indirect
npmhas-flag4.0.0indirect
npmhas-property-descriptors1.0.2indirect
npmhas-proto1.2.0indirect
npmhas-symbols1.1.0indirect
npmhas-tostringtag1.0.2indirect
npmhasown2.0.2indirect
npmhasown2.0.3indirect
npmhe1.2.0indirect
npmhosted-git-info2.8.9indirect
npmhtml-escaper2.0.2indirect
npmhttp-proxy-agent7.0.2indirect
npmhttps-proxy-agent7.0.6indirect
npmimmediate3.0.6indirect
npmimport-fresh3.3.1indirect
npmimurmurhash0.1.4indirect
npminflight1.0.6indirect
npminherits2.0.4indirect
npminternal-slot1.1.0indirect
npmis-array-buffer3.0.5indirect
npmis-arrayish0.2.1indirect
npmis-async-function2.1.1indirect
npmis-bigint1.1.0indirect
npmis-binary-path2.1.0indirect
npmis-boolean-object1.2.2indirect
npmis-callable1.2.7indirect
npmis-core-module2.16.1indirect
npmis-data-view1.0.2indirect
npmis-date-object1.1.0indirect
npmis-extglob2.1.1indirect
npmis-finalizationregistry1.1.1indirect
npmis-fullwidth-code-point3.0.0indirect
npmis-generator-function1.1.2indirect
npmis-glob4.0.3indirect
npmis-interactive2.0.0indirect
npmis-map2.0.3indirect
npmis-negative-zero2.0.3indirect
npmis-number7.0.0indirect
npmis-number-object1.1.1indirect
npmis-plain-obj2.1.0indirect
npmis-regex1.2.1indirect
npmis-set2.0.3indirect
npmis-shared-array-buffer1.0.4indirect
npmis-string1.1.1indirect
npmis-symbol1.1.1indirect
npmis-typed-array1.1.15indirect
npmis-unicode-supported0.1.0indirect
npmis-unicode-supported1.3.0indirect
npmis-unicode-supported2.1.0indirect
npmis-weakmap2.0.2indirect
npmis-weakref1.1.1indirect
npmis-weakset2.0.4indirect
npmisarray1.0.0indirect
npmisarray2.0.5indirect
npmisexe2.0.0indirect
npmistanbul-lib-coverage3.2.2indirect
npmistanbul-lib-report3.0.1indirect
npmistanbul-reports3.2.0indirect
npmjackspeak3.4.3indirect
npmjson-buffer3.0.1indirect
npmjson-parse-better-errors1.0.2indirect
npmjson-schema-traverse0.4.1indirect
npmjson-stable-stringify-without-jsonify1.0.1indirect
npmjszip3.10.1indirect
npmkeyv4.5.4indirect
npmlevn0.4.1indirect
npmlie3.3.0indirect
npmload-json-file4.0.0indirect
npmlocate-path6.0.0indirect
npmlodash.merge4.6.2indirect
npmlog-symbols4.1.0indirect
npmlog-symbols6.0.0indirect
npmlru-cache10.4.3indirect
npmmake-dir4.0.0indirect
npmmath-intrinsics1.1.0indirect
npmmemorystream0.3.1indirect
npmmerge21.4.1indirect
npmmicromatch4.0.8indirect
npmmimic-function5.0.1indirect
npmminimatch10.2.5indirect
npmminimatch3.1.5indirect
npmminimatch5.1.9indirect
npmminimatch9.0.9indirect
npmminipass7.1.2indirect
npmminipass7.1.3indirect
npmmocha10.8.2indirect
npmms2.1.3indirect
npmnatural-compare1.4.0indirect
npmnice-try1.0.5indirect
npmnormalize-package-data2.5.0indirect
npmnormalize-path3.0.0indirect
npmnpm-run-all4.1.5indirect
npmobject-inspect1.13.4indirect
npmobject-keys1.1.1indirect
npmobject.assign4.1.7indirect
npmonce1.4.0indirect
npmonetime7.0.0indirect
npmoptionator0.9.4indirect
npmora8.2.0indirect
npmown-keys1.0.1indirect
npmp-limit3.1.0indirect
npmp-locate5.0.0indirect
npmpackage-json-from-dist1.0.1indirect
npmpako1.0.11indirect
npmparent-module1.0.1indirect
npmparse-json4.0.0indirect
npmpath-exists4.0.0indirect
npmpath-is-absolute1.0.1indirect
npmpath-key2.0.1indirect
npmpath-key3.1.1indirect
npmpath-parse1.0.7indirect
npmpath-scurry1.11.1indirect
npmpath-type3.0.0indirect
npmpicomatch2.3.2indirect
npmpicomatch4.0.4indirect
npmpidtree0.3.1indirect
npmpify3.0.0indirect
npmpossible-typed-array-names1.1.0indirect
npmprelude-ls1.2.1indirect
npmprocess-nextick-args2.0.1indirect
npmpunycode2.3.1indirect
npmqueue-microtask1.2.3indirect
npmread-pkg3.0.0indirect
npmreadable-stream2.3.8indirect
npmreaddirp3.6.0indirect
npmreflect.getprototypeof1.0.10indirect
npmregexp.prototype.flags1.5.4indirect
npmrequire-directory2.1.1indirect
npmresolve1.22.11indirect
npmresolve1.22.12indirect
npmresolve-from4.0.0indirect
npmrestore-cursor5.1.0indirect
npmreusify1.1.0indirect
npmrun-parallel1.2.0indirect
npmsafe-array-concat1.1.3indirect
npmsafe-array-concat1.1.4indirect
npmsafe-buffer5.1.2indirect
npmsafe-push-apply1.0.0indirect
npmsafe-regex-test1.1.0indirect
npmsemver5.7.2indirect
npmsemver7.7.3indirect
npmsemver7.7.4indirect
npmserialize-javascript7.0.5indirect
npmset-function-length1.2.2indirect
npmset-function-name2.0.2indirect
npmset-proto1.0.0indirect
npmsetimmediate1.0.5indirect
npmshebang-command1.2.0indirect
npmshebang-command2.0.0indirect
npmshebang-regex1.0.0indirect
npmshebang-regex3.0.0indirect
npmshell-quote1.10.0indirect
npmside-channel1.1.0indirect
npmside-channel-list1.0.0indirect
npmside-channel-list1.0.1indirect
npmside-channel-map1.0.1indirect
npmside-channel-weakmap1.0.2indirect
npmsignal-exit4.1.0indirect
npmspdx-correct3.2.0indirect
npmspdx-exceptions2.5.0indirect
npmspdx-expression-parse3.0.1indirect
npmspdx-license-ids3.0.22indirect
npmspdx-license-ids3.0.23indirect
npmstdin-discarder0.2.2indirect
npmstop-iteration-iterator1.1.0indirect
npmstring-width4.2.3indirect
npmstring-width5.1.2indirect
npmstring-width7.2.0indirect
npmstring.prototype.padend3.1.6indirect
npmstring.prototype.trim1.2.10indirect
npmstring.prototype.trimend1.0.9indirect
npmstring.prototype.trimstart1.0.8indirect
npmstring_decoder1.1.1indirect
npmstrip-ansi6.0.1indirect
npmstrip-ansi7.1.2indirect
npmstrip-ansi7.2.0indirect
npmstrip-bom3.0.0indirect
npmstrip-json-comments3.1.1indirect
npmsupports-color5.5.0indirect
npmsupports-color7.2.0indirect
npmsupports-color8.1.1indirect
npmsupports-color9.4.0indirect
npmsupports-preserve-symlinks-flag1.0.0indirect
npmtapable2.3.0indirect
npmtest-exclude6.0.0indirect
npmtinyglobby0.2.15indirect
npmtinyglobby0.2.16indirect
npmto-regex-range5.0.1indirect
npmts-api-utils2.1.0indirect
npmts-api-utils2.5.0indirect
npmtype-check0.4.0indirect
npmtyped-array-buffer1.0.3indirect
npmtyped-array-byte-length1.0.3indirect
npmtyped-array-byte-offset1.0.4indirect
npmtyped-array-length1.0.7indirect
npmtypescript5.9.3indirect
npmunbox-primitive1.1.0indirect
npmundici-types6.21.0indirect
npmuri-js4.4.1indirect
npmutil-deprecate1.0.2indirect
npmv8-to-istanbul9.3.0indirect
npmvalidate-npm-package-license3.0.4indirect
npmwhich1.3.1indirect
npmwhich2.0.2indirect
npmwhich-boxed-primitive1.1.1indirect
npmwhich-builtin-type1.2.1indirect
npmwhich-collection1.0.2indirect
npmwhich-typed-array1.1.19indirect
npmwhich-typed-array1.1.20indirect
npmword-wrap1.2.5indirect
npmworkerpool6.5.1indirect
npmwrap-ansi7.0.0indirect
npmwrap-ansi8.1.0indirect
npmwrappy1.0.2indirect
npmy18n5.0.8indirect
npmyargs16.2.0indirect
npmyargs17.7.2indirect
npmyargs-parser20.2.9indirect
npmyargs-parser21.1.1indirect
npmyargs-unparser2.0.0indirect
npmyocto-queue0.1.0indirect
PyPIaffine2.4.0indirect
PyPIaiofile3.9.0indirect
PyPIalabaster0.7.16indirect
PyPIaltair6.1.0indirect
PyPIannotated-doc0.0.4indirect
PyPIannotated-types0.7.0indirect
PyPIanthropic0.107.1indirect
PyPIantlr4-python3-runtime4.9.3indirect
PyPIanyio4.14.2indirect
PyPIappnope0.1.4indirect
PyPIargh0.31.3indirect
PyPIargon2-cffi25.1.0indirect
PyPIargon2-cffi-bindings25.1.0indirect
PyPIarrow1.4.0indirect
PyPIasttokens3.0.1indirect
PyPIasync-lru2.3.0indirect
PyPIattrs26.1.0indirect
PyPIauthlib1.7.2indirect
PyPIbabel2.18.0indirect
PyPIbackports-tarfile1.2.0indirect
PyPIbackports-zstd1.3.0indirect
PyPIbackports-zstd1.5.0indirect
PyPIbackrefs7.0indirect
PyPIbeartype0.22.9indirect
PyPIbeautifulsoup44.14.3indirect
PyPIbinaryornot0.6.0indirect
PyPIbleach6.4.0indirect
PyPIboto3-stubs1.42.73indirect
PyPIbotocore1.42.73indirect
PyPIbotocore1.43.18indirect
PyPIbotocore1.43.6indirect
PyPIbotocore-stubs1.42.41indirect
PyPIbrotlicffi1.2.0.1indirect
PyPIbump2version1.0.1indirect
PyPIbumpversion0.6.0indirect
PyPIcachetools7.1.1indirect
PyPIcaio0.9.25indirect
PyPIcertifi2026.2.25indirect
PyPIcertifi2026.4.22indirect
PyPIcertifi2026.5.20indirect
PyPIcffi2.0.0indirect
PyPIcharset-normalizer3.4.6indirect
PyPIcharset-normalizer3.4.7indirect
PyPIchoreographer1.3.0indirect
PyPIclick-plugins1.1.1.2indirect
PyPIcligj0.7.2indirect
PyPIcomm0.2.3indirect
PyPIcommentjson0.9.0indirect
PyPIcontourpy1.3.3indirect
PyPIcookiecutter2.7.1indirect
PyPIcoverage7.13.5indirect
PyPIcycler0.12.1indirect
PyPIcyclopts4.12.0indirect
PyPIdb-dtypes1.7.2indirect
PyPIdebugpy1.8.20indirect
PyPIdecorator5.2.1indirect
PyPIdecorator5.3.1indirect
PyPIdeepmerge2.0indirect
PyPIdefusedxml0.7.1indirect
PyPIdistro1.9.0indirect
PyPIdnspython2.8.0indirect
PyPIdocstring-parser0.18.0indirect
PyPIdocutils0.17.1indirect
PyPIdocutils0.22.4indirect
PyPIecmwf-datastores-client0.5.1indirect
PyPIemail-validator2.3.0indirect
PyPIet-xmlfile2.0.0indirect
PyPIetl0.1.0indirect
PyPIexceptiongroup1.3.1indirect
PyPIexecuting2.2.1indirect
PyPIfastapi0.136.1indirect
PyPIfastmcp-slim4.0.10indirect
PyPIfilelock3.25.2indirect
PyPIfilelock3.29.0indirect
PyPIfonttools4.62.1indirect
PyPIfqdn1.5.1indirect
PyPIfuro2022.9.29indirect
PyPIgeographiclib2.1indirect
PyPIghp-import2.1.0indirect
PyPIgitdb4.0.12indirect
PyPIgoogle-api-core2.30.3indirect
PyPIgoogle-api-core2.8.0indirect
PyPIgoogle-api-python-client2.193.0indirect
PyPIgoogle-api-python-client2.196.0indirect
PyPIgoogle-api-python-client2.197.0indirect
PyPIgoogle-auth2.49.1indirect
PyPIgoogle-auth2.52.0indirect
PyPIgoogle-auth2.53.0indirect
PyPIgoogle-auth-httplib20.3.0indirect
PyPIgoogle-auth-httplib20.4.0indirect
PyPIgoogle-auth-oauthlib1.4.0indirect
PyPIgoogle-cloud-bigquery3.41.0indirect
PyPIgoogle-cloud-core2.6.0indirect
PyPIgoogle-cloud-storage3.10.1indirect
PyPIgoogle-crc32c1.8.0indirect
PyPIgoogle-resumable-media2.9.0indirect
PyPIgoogleapis-common-protos1.56.1indirect
PyPIgoogleapis-common-protos1.75.0indirect
PyPIgreenlet3.5.0indirect
PyPIgreenlet3.5.1indirect
PyPIgriffe-typingdoc0.3.1indirect
PyPIgriffelib2.0.2indirect
PyPIgrpcio1.80.0indirect
PyPIgrpcio1.83.0indirect
PyPIgrpcio-status1.62.3indirect
PyPIgrpcio-status1.83.0indirect
PyPIgspread6.2.1indirect
PyPIh110.16.0indirect
PyPIhf-xet1.5.0indirect
PyPIhttpcore1.0.9indirect
PyPIhttpcore22.13.1indirect
PyPIhttplib20.32.0indirect
PyPIhttptools0.7.1indirect
PyPIhttpx0.28.1indirect
PyPIhttpx22.13.1indirect
PyPIhttpx2-jsfetch1.0indirect
PyPIhuggingface-hub1.14.0indirect
PyPIhumanize4.15.0indirect
PyPIhydra-core1.3.6indirect
PyPIidna3.17indirect
PyPIidna3.18indirect
PyPIidna3.20indirect
PyPIimagesize2.0.0indirect
PyPIimportlib-metadata8.7.1indirect
PyPIinflate641.0.4indirect
PyPIinflect7.5.0indirect
PyPIiniconfig2.3.0indirect
PyPIipykernel7.2.0indirect
PyPIipython9.10.0indirect
PyPIipython9.11.0indirect
PyPIipython9.13.0indirect
PyPIipython9.14.0indirect
PyPIipython-pygments-lexers1.1.1indirect
PyPIipywidgets8.1.8indirect
PyPIisodate0.7.2indirect
PyPIisoduration20.11.0indirect
PyPIitsdangerous2.2.0indirect
PyPIjaraco-classes3.4.0indirect
PyPIjaraco-context6.1.2indirect
PyPIjaraco-functools4.4.0indirect
PyPIjedi0.19.2indirect
PyPIjedi0.20.0indirect
PyPIjeepney0.9.0indirect
PyPIjiter0.14.0indirect
PyPIjmespath1.1.0indirect
PyPIjoblib1.5.3indirect
PyPIjoserfc1.7.3indirect
PyPIjson50.14.0indirect
PyPIjsonpointer3.1.1indirect
PyPIjsonref1.1.0indirect
PyPIjsonschema-path0.4.6indirect
PyPIjsonschema-specifications2025.9.1indirect
PyPIjupyter1.1.1indirect
PyPIjupyter-builder1.0.2indirect
PyPIjupyter-client8.8.0indirect
PyPIjupyter-console6.6.3indirect
PyPIjupyter-core5.9.1indirect
PyPIjupyter-events0.12.1indirect
PyPIjupyter-lsp2.3.1indirect
PyPIjupyter-server2.20.0indirect
PyPIjupyter-server-terminals0.5.4indirect
PyPIjupyterlab-pygments0.3.0indirect
PyPIjupyterlab-server2.28.0indirect
PyPIjupyterlab-widgets3.0.16indirect
PyPIjupytext1.19.2indirect
PyPIkaleido1.1.0indirect
PyPIkeyring25.7.0indirect
PyPIkiwisolver1.5.0indirect
PyPIlark1.3.1indirect
PyPIlark-parser0.7.8indirect
PyPIline-profiler5.0.2indirect
PyPIlogfire-api4.33.0indirect
PyPIlogistro2.0.1indirect
PyPIlxml6.1.0indirect
PyPImarkdown3.10.2indirect
PyPImarkdown-it-py4.2.0indirect
PyPImarko2.2.2indirect
PyPImarkupsafe3.0.3indirect
PyPImatplotlib3.10.9indirect
PyPImatplotlib-inline0.2.1indirect
PyPImatplotlib-inline0.2.2indirect
PyPImcp2.3.0indirect
PyPImcp-types2.3.0indirect
PyPImdit-py-plugins0.6.1indirect
PyPImdurl0.1.2indirect
PyPImemory-profiler0.61.0indirect
PyPImergedeep1.3.4indirect
PyPImkdocs1.6.1indirect
PyPImkdocs-autorefs1.4.4indirect
PyPImkdocs-click0.9.0indirect
PyPImkdocs-exclude1.0.2indirect
PyPImkdocs-gen-files0.6.1indirect
PyPImkdocs-get-deps0.2.2indirect
PyPImkdocs-git-authors-plugin0.10.0indirect
PyPImkdocs-git-revision-date-localized-plugin1.5.2indirect
PyPImkdocs-glightbox0.5.2indirect
PyPImkdocs-jupyter0.26.3indirect
PyPImkdocs-material9.7.7indirect
PyPImkdocs-material-extensions1.3.1indirect
PyPImkdocstrings1.0.4indirect
PyPImkdocstrings-python2.0.3indirect
PyPImore-itertools11.0.2indirect
PyPImpmath1.3.0indirect
PyPImultiurl0.3.7indirect
PyPImultivolumefile0.2.3indirect
PyPImypy-boto3-s31.42.67indirect
PyPImypy-extensions1.1.0indirect
PyPInarwhals2.21.0indirect
PyPInbclient0.10.4indirect
PyPInbconvert7.17.1indirect
PyPInbformat5.10.4indirect
PyPInest-asyncio1.6.0indirect
PyPInetworkx3.6.1indirect
PyPInotebook7.6.3indirect
PyPInotebook-shim0.2.4indirect
PyPIoauth2client4.1.3indirect
PyPIoauthlib4.0.0indirect
PyPIomegaconf2.3.0indirect
PyPIopenapi-pydantic0.5.1indirect
PyPIopentelemetry-api1.41.1indirect
PyPIorjson3.11.9indirect
PyPIoutcome1.3.0.post0indirect
PyPIoverrides7.7.0indirect
PyPIpackaging26.0indirect
PyPIpackaging26.2indirect
PyPIpaginate0.5.7indirect
PyPIpandas-stubs3.0.5.260914indirect
PyPIpandocfilters1.5.1indirect
PyPIparso0.8.6indirect
PyPIparso0.8.7indirect
PyPIpathable0.5.0indirect
PyPIpathspec1.1.1indirect
PyPIpatsy1.0.2indirect
PyPIpdfminer-six20251230indirect
PyPIpetl1.7.17indirect
PyPIpexpect4.9.0indirect
PyPIpillow12.3.0indirect
PyPIplaywright1.61.0indirect
PyPIplotly6.7.0indirect
PyPIpluggy1.6.0indirect
PyPIprometheus-client0.25.0indirect
PyPIprompt-toolkit3.0.52indirect
PyPIproperdocs1.6.7indirect
PyPIproto-plus1.28.0indirect
PyPIpsutil7.2.2indirect
PyPIptyprocess0.7.0indirect
PyPIpure-eval0.2.3indirect
PyPIpy-key-value-aio0.4.4indirect
PyPIpyasn1-modules0.4.2indirect
PyPIpybcj1.0.7indirect
PyPIpycparser3.0indirect
PyPIpycryptodomex3.23.0indirect
PyPIpydantic-core2.41.5indirect
PyPIpydantic-core2.46.4indirect
PyPIpydantic-graph1.106.0indirect
PyPIpydantic-settings2.14.2indirect
PyPIpydata-google-auth1.9.1indirect
PyPIpydeck0.9.2indirect
PyPIpyee13.0.1indirect
PyPIpygments2.20.0indirect
PyPIpyinstrument5.0.3indirect
PyPIpyjwt2.15.0indirect
PyPIpymdown-extensions11.0.1indirect
PyPIpynacl1.6.2indirect
PyPIpyogrio0.12.1indirect
PyPIpyparsing3.3.2indirect
PyPIpypdfium25.8.0indirect
PyPIpyperclip1.11.0indirect
PyPIpyppmd1.3.1indirect
PyPIpysocks1.7.1indirect
PyPIpytest9.0.3indirect
PyPIpytest-asyncio1.3.0indirect
PyPIpytest-cov7.1.0indirect
PyPIpytest-timeout2.4.0indirect
PyPIpython-dateutil2.9.0.post0indirect
PyPIpython-decouple3.8indirect
PyPIpython-json-logger4.1.0indirect
PyPIpython-multipart0.0.32indirect
PyPIpython-slugify8.0.4indirect
PyPIpywin32311indirect
PyPIpywin32-ctypes0.2.3indirect
PyPIpywinpty3.0.3indirect
PyPIpyyaml-env-tag1.1indirect
PyPIpyzmq27.1.0indirect
PyPIrasterio1.4.4indirect
PyPIrasterio1.5.0indirect
PyPIrdflib7.6.0indirect
PyPIreferencing0.37.0indirect
PyPIrequests-oauthlib2.0.0indirect
PyPIrfc3339-validator0.1.4indirect
PyPIrfc39862.0.0indirect
PyPIrfc3986-validator0.1.1indirect
PyPIrfc3987-syntax1.1.0indirect
PyPIrich-rst1.3.2indirect
PyPIrpds-py0.30.0indirect
PyPIrpds-py2026.5.1indirect
PyPIrsa4.9.1indirect
PyPIruff0.16.10indirect
PyPIs3transfer0.16.0indirect
PyPIs3transfer0.17.0indirect
PyPIs3transfer0.18.0indirect
PyPIsafetensors0.7.0indirect
PyPIseaborn0.13.2indirect
PyPIsecretstorage3.5.0indirect
PyPIselectolax0.4.8indirect
PyPIsend2trash2.1.0indirect
PyPIsentence-transformers5.6.0indirect
PyPIsetuptools83.0.0indirect
PyPIshellingham1.5.4indirect
PyPIsimpleeval1.0.7indirect
PyPIsix1.17.0indirect
PyPIslack-sdk3.41.0indirect
PyPIsmmap5.0.3indirect
PyPIsniffio1.3.1indirect
PyPIsnowballstemmer3.0.1indirect
PyPIsortedcontainers2.4.0indirect
PyPIsoupsieve2.10indirect
PyPIsphinx4.5.0indirect
PyPIsphinx-basic-ng1.0.0b2indirect
PyPIsphinxcontrib-applehelp2.0.0indirect
PyPIsphinxcontrib-devhelp2.0.0indirect
PyPIsphinxcontrib-htmlhelp2.1.0indirect
PyPIsphinxcontrib-jsmath1.0.1indirect
PyPIsphinxcontrib-qthelp2.0.0indirect
PyPIsphinxcontrib-serializinghtml2.0.0indirect
PyPIsqlacodegen4.0.3indirect
PyPIsse-starlette3.4.4indirect
PyPIstack-data0.6.3indirect
PyPIstarlette1.3.1indirect
PyPIstatsmodels0.14.6indirect
PyPIstreamlit1.63.0indirect
PyPIstreamlit-aggrid1.1.7indirect
PyPIsympy1.14.0indirect
PyPItabulate0.10.0indirect
PyPIterminado0.18.1indirect
PyPItext-unidecode1.3indirect
PyPItexttable1.7.0indirect
PyPIthreadpoolctl3.6.0indirect
PyPItinycss21.4.0indirect
PyPItokenizers0.22.2indirect
PyPItoml0.10.2indirect
PyPItorch2.13.0indirect
PyPItorch2.13.0+cpuindirect
PyPItraitlets5.14.3indirect
PyPItraitlets5.15.0indirect
PyPItransformers5.10.1indirect
PyPItrio0.33.0indirect
PyPItrio-websocket0.12.2indirect
PyPItruststore0.10.4indirect
PyPIty0.0.85indirect
PyPItypeguard4.5.1indirect
PyPItyper0.25.1indirect
PyPItypes-awscrt0.31.3indirect
PyPItypes-pyyaml6.0.12.20260510indirect
PyPItypes-s3transfer0.16.0indirect
PyPItyping-inspect0.9.0indirect
PyPItyping-inspection0.4.2indirect
PyPItzdata2025.3indirect
PyPItzdata2026.2indirect
PyPIuncalled-for0.4.0indirect
PyPIuri-template1.3.0indirect
PyPIuritemplate4.2.0indirect
PyPIuvicorn0.46.0indirect
PyPIuvloop0.22.1indirect
PyPIvalidators0.35.0indirect
PyPIwatchdog6.0.0indirect
PyPIwatchfiles1.1.1indirect
PyPIwcwidth0.6.0indirect
PyPIwcwidth0.7.0indirect
PyPIwebcolors25.10.0indirect
PyPIwebencodings0.5.1indirect
PyPIwebsocket-client1.9.0indirect
PyPIwebsockets16.0indirect
PyPIwfork-streamlit-profiler1.6.0indirect
PyPIwidgetsnbextension4.0.15indirect
PyPIwrapt2.1.2indirect
PyPIwrapt2.2.1indirect
PyPIwsproto1.3.2indirect
PyPIxarray2026.2.0indirect
PyPIxarray2026.4.0indirect
PyPIzipp3.23.1indirect
Dependency advisories 8

This repository publishes no package the index resolves, so its own dependency graph was assessed — 958 packages, which also include development and test pins that never ship: 8 carry known advisories, of which 2 are direct.

PackageVersionRelationSeverityAdvisoriesFixed in
shell-quote1.10.0indirectcritical11.11.0
fsspec2026.4.0directhigh12026.6.0
pydantic-ai-slim1.106.0directhigh82.52.0
braces3.0.3indirecthigh1—
hydra-core1.3.6indirecthigh11.4.0.dev10
jupyter-server2.20.0indirecthigh22.21.0
ajv6.12.6indirectmoderate18.18.0
diff5.2.0indirectmoderate18.0.3

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable

Feedback

Spotted something off in this report, or have thoughts to share? Wrong measurements, missed tooling, ideas, questions — anything is welcome. Every message is read and gets a response.

The message is kept through sign-in.

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.10.0, schema v0.34.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics — PyPI, npm.