Public recordModerate
Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-21 23:16 UTC
pypa / pyproject-hooks
A low-level library for calling build-backends in `pyproject.toml`-based project
pypa/pyproject-hooks holds a health index of 64 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (90/100) and lowest on Vitality (29/100). It was last updated 107 days ago. 2 contributors account for most of its recent work.
64
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
64
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Python Packaging AuthorityOrganization
2,375 followers59 public repossince Mar 2011
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| PyPI | pyproject_hooks | 1.2.0 | - | 4 | 660 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
29
Development activity
22Critical
How it's scored
| 9.9/36 | Push recency — last push 107 days ago |
| 2.8/36 | Commit cadence — 4/52 weeks with commits |
| 9/18 | Commit volume — 9 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 9 |
| human_commit_share | 1 |
| days_since_last_push | 107 |
| active_weeks_last_year | 4 |
Release discipline
40At risk
How it's scored
| 16.2/27 | Ships releases — 18 version tags (no GitHub releases) |
| 7.2/36 | Release recency — latest release 660 days ago |
| 12.6/27 | Release cadence — a release every ~160.2 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 18 |
| latest_release_tag | v1.2.0 |
| releases_from_tags | yes |
| days_since_latest_release | 660 |
| mean_days_between_releases | 160.2 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
60
Popularity & adoption
55Moderate
How it's scored
| 34.1/60 | Stars — 128 stars |
| 14.6/25 | Forks — 58 forks |
| 6/15 | Watchers — 13 watchers |
Inputs used
| forks | 58 |
| stars | 128 |
| watchers | 13 |
| growth_state | organic |
| growth_factor_pct | 100 |
Community health
65Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | yes |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
74
Maintainer resilience (bus factor)
62Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 13.2/22.5 | Commit distribution — top contributor authored 41% of commits |
| 13.5/13.5 | Contributor breadth — 32 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 84 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 32 |
| top_contributor_share | 0.412 |
Issue & PR responsiveness
85Excellent
How it's scored
| 41.7/46.8 | Issue resolution — 89% of issues closed |
| 31.7/38.3 | PR acceptance — 102/123 decided PRs merged |
| 12/15 | OpenSSF Scorecard: Code-Review — Found 11/13 approved changesets -- score normalized to 8 |
Inputs used
| merged_prs | 102 |
| open_issues | 11 |
| closed_issues | 90 |
| issue_closed_ratio | 0.891 |
| closed_unmerged_prs | 21 |
Ownership & stewardship
79Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 24.3/25 | Owner reach — 2,375 followers of pypa |
| 24.9/25 | Track record — 59 public repos, account ~15 yr old |
Inputs used
| followers | 2,375 |
| owner_type | Organization |
| is_verified | — |
| owner_login | pypa |
| public_repos | 59 |
| account_age_days | 5,620 |
Package maintenance
71Good
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on pypi |
| 14/35 | Publish recency — latest publish 660 days ago |
| 12/20 | Version history — 4 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | pyproject_hooks |
| ecosystems | pypi |
| any_deprecated | no |
| min_days_since_publish | 660 |
Engineering Quality
Are baseline engineering and documentation practices in place?
90
Engineering practices
84Good
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config |
| 9.6/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 10/20 | OpenSSF Scorecard: CI-Tests — 7 out of 13 merged PRs checked by a CI test -- score normalized to 5 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | yes |
Documentation
100Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://pyproject-hooks.readthedocs.io/ |
| 10/10 | Repository description |
| 10/10 | Topics — 2 topics |
| 10/10 | Wiki |
Inputs used
| topics | python, packaging |
| has_wiki | yes |
| homepage | https://pyproject-hooks.readthedocs.io/ |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
67
Security posture
59Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 1.2/2.5 | CI-Tests — 7 out of 13 merged PRs checked by a CI test -- score normalized to 5 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 6/7.5 | Code-Review — Found 11/13 approved changesets -- score normalized to 8 |
| 2.5/2.5 | Contributors — project has 84 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0 |
| 5/5 | Packaging — packaging workflow detected |
| 3/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 5.9 |
Excluded from scoring (no data or not applicable): branch_protection, signed_releases. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 3 |
| unassessed_packages | 8 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 3 resolved dependencies against OSV. 8 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
52
Agent context & guidance
23Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 22.9/40 | Legible commit history — 43 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.43 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
68Moderate
How it's scored
| 18/18 | One-command bootstrap — noxfile.py |
| 22/22 | Automated tests |
| 11/11 | Lint / format config |
| 11/11 | Static type checking — src/pyproject_hooks/py.typed |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 6/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | noxfile.py |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | src/pyproject_hooks/py.typed |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
How it's scored
| 27/45 | Type-checkable code — Python with type-check config (src/pyproject_hooks/py.typed) |
| 55/55 | Manageable file sizes — 0/26 source files over 60KB |
Inputs used
| primary_language | Python |
| largest_source_bytes | 15,456 |
| source_files_sampled | 26 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — samples |
Inputs used
| example_dirs | samples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
128GitHub stars
32contributors
9commits, last 12 months
107days since last push
18releases
2bus factor
11open issues
PyPIpackage ecosystems
More detail
Star and fork history 128 ★ / 58 ⇿
128Stars
58Forks
18Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 12Patch 5
Each point covers 9 days.
OpenSSF Scorecard 5.9 / 10
5.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 5 | CI-Tests | 7 out of 13 merged PRs checked by a CI test -- score normalized to 5 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 8 | Code-Review | Found 11/13 approved changesets -- score normalized to 8 |
| 10 | Contributors | project has 84 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0 |
| 10 | Packaging | packaging workflow detected |
| 6 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 6 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
All dependencies 11
Full resolved dependency set from the GitHub dependency graph: 0 direct and 11 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| PyPI | build | 1.4.2 | indirect |
| PyPI | flake8 | — | indirect |
| PyPI | furo | — | indirect |
| PyPI | packaging | 26.0 | indirect |
| PyPI | pyproject-hooks | 1.2.0 | indirect |
| PyPI | pytest | — | indirect |
| PyPI | setuptools | — | indirect |
| PyPI | sphinx | — | indirect |
| PyPI | sphinx-issues | — | indirect |
| PyPI | testpath | — | indirect |
| PyPI | tomli | — | indirect |
Dependency advisories 0
This repository publishes no package the index resolves, so its own dependency graph was assessed — 3 packages, which also include development and test pins that never ship: 0 carry known advisories, of which 0 are direct. 8 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"python",
"packaging"
],
"is_fork": false,
"size_kb": 370,
"has_wiki": true,
"homepage": "https://pyproject-hooks.readthedocs.io/",
"languages": {
"Python": 50670
},
"pushed_at": "2026-04-05T19:03:53Z",
"created_at": "2017-07-13T13:06:18Z",
"owner_type": "Organization",
"updated_at": "2026-06-30T16:36:16Z",
"description": "A low-level library for calling build-backends in `pyproject.toml`-based project",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": "https://www.pypa.io",
"name": "Python Packaging Authority",
"type": "Organization",
"login": "pypa",
"company": null,
"location": "United States of America",
"followers": 2375,
"avatar_url": "https://avatars.githubusercontent.com/u/647025?v=4",
"created_at": "2011-03-02T14:17:18Z",
"is_verified": null,
"public_repos": 59,
"account_age_days": 5620
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2024-09-29T09:21:41Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2024-04-29T07:24:53Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2022-11-21T11:34:36Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2023-11-08T11:21:27Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2022-07-29T13:55:01Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2021-10-18T09:12:50Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2021-10-18T00:09:46Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2021-07-18T17:57:58Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2021-03-11T17:12:31Z"
},
{
"tag": "v0.9.1",
"kind": "patch",
"published_at": "2020-10-18T20:37:33Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2020-10-18T20:20:52Z"
},
{
"tag": "v0.8.2",
"kind": "patch",
"published_at": "2020-04-01T21:05:41Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2019-11-23T12:46:39Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2019-11-23T12:41:05Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2019-09-27T11:15:04Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2019-08-06T10:41:04Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2018-12-17T17:15:11Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2018-12-17T15:56:31Z"
}
],
"recent_commits": [
{
"oid": "d9ee8a0fe9f1fe351187ff85965a8b8fcb7e78a6",
"body": "Pin GitHub Actions and Python packages",
"is_bot": false,
"headline": "Merge pull request #225 from sethmlarson/pin-github-actions",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-04-05T19:03:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d1e7eeb419e5e22c31617ebc90841c599f1c539",
"body": null,
"is_bot": false,
"headline": "Pin GitHub Actions and Python packages",
"author_name": "Seth Michael Larson",
"author_login": "sethmlarson",
"committed_at": "2026-03-27T20:18:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aabadf528d142aa0e246ad9a823178f86b62d3e4",
"body": "chore: use subprocess.run instead of old check_*",
"is_bot": false,
"headline": "Merge pull request #210 from henryiii/henryiii/chore/subprocess.run",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-02-19T12:45:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f11cee2082861fdcd4cbf15a357c8699b754b250",
"body": "Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com>",
"is_bot": false,
"headline": "chore: add a note about the exception object having the output",
"author_name": "Henry Schreiner",
"author_login": "henryiii",
"committed_at": "2026-02-18T21:39:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61d5792a8d8ac74683cb9bd60ed6a63b5a1acef1",
"body": "Co-authored-by: Pradyun Gedam <pradyunsg@gmail.com>",
"is_bot": false,
"headline": "Apply suggestions from code review",
"author_name": "Henry Schreiner",
"author_login": "henryiii",
"committed_at": "2026-02-18T21:37:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfbe5386bfea0c5cffcb53be77eff9c75eaa36e2",
"body": "Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com>",
"is_bot": false,
"headline": "chore: use subprocess.run instead of old check_*",
"author_name": "Henry Schreiner",
"author_login": "henryiii",
"committed_at": "2026-02-18T21:37:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3de7fad37912a8bae56804869bddd1a2860beaa8",
"body": "Fix find_distributions with non-empty context",
"is_bot": false,
"headline": "Merge pull request #212 from kulikjak/fix-find_distributions",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-02-18T15:37:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51e84d783ff52d2cda07a895163eb589d2b0be7b",
"body": "Show traceback from output.json on BackendUnavailable",
"is_bot": false,
"headline": "Merge pull request #219 from bbhtt/bbhtt/show-traceback-outputjson",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-02-18T15:35:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38cb960966cb885616d7d754cbe9f2e4fe916929",
"body": null,
"is_bot": false,
"headline": "add test for find_distributions",
"author_name": "Jakub Kulík",
"author_login": "kulikjak",
"committed_at": "2026-02-18T15:29:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f1a2b59cf126c74e567759a03f251708bf730c4",
"body": "Co-authored-by: Anderson Bravalheri <andersonbravalheri+github@gmail.com>",
"is_bot": false,
"headline": "Update src/pyproject_hooks/_in_process/_in_process.py",
"author_name": "Jakub Kulík",
"author_login": "kulikjak",
"committed_at": "2026-02-18T15:29:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcc58b70689d92911aab58f1e7bd587cf63aec9c",
"body": null,
"is_bot": false,
"headline": "Fix find_distributions with non-empty context",
"author_name": "Jakub Kulík",
"author_login": "kulikjak",
"committed_at": "2026-02-18T15:29:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "763714a4f8e8f2ad7a9bdd2863aee6ddadc0832b",
"body": "Fixes https://github.com/pypa/pyproject-hooks/issues/217",
"is_bot": false,
"headline": "Show traceback from output.json on BackendUnavailable",
"author_name": "bbhtt",
"author_login": "bbhtt",
"committed_at": "2026-02-18T15:09:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9af158351225de24ae04f9bb06695447baf20e0",
"body": "Switch license metadata to the PEP 639 format",
"is_bot": false,
"headline": "Merge pull request #220 from SpecLad/pep-639",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-02-18T15:06:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f52595a9ee3640bc6e04c0c39e44315b4a7d7d48",
"body": "License classifiers and the table form of `license` are now deprecated.",
"is_bot": false,
"headline": "Switch license metadata to the PEP 639 format",
"author_name": "Roman Donchenko",
"author_login": "SpecLad",
"committed_at": "2026-02-18T14:54:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b1fe0a86528ac54718c31485b1c3f8199fa1d4c",
"body": "Use os.path.commonpath() instead of commonprefix()",
"is_bot": false,
"headline": "Merge pull request #222 from sethmlarson/patch-2",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-02-18T13:18:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f230da76573e32003cf42746b32821f32b0beda6",
"body": null,
"is_bot": false,
"headline": "Use os.path.commonpath() instead of commonprefix()",
"author_name": "Seth Michael Larson",
"author_login": "sethmlarson",
"committed_at": "2026-02-03T19:43:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10093cd5bc488c6ffbb4dfa034f54c7ac1e3178e",
"body": "feat: use `sphinx-issues` for linking",
"is_bot": false,
"headline": "Merge pull request #218 from shenxianpeng/update-docs",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2025-06-07T16:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70cabb0bb8d656afae7b245f0f7201de2865964b",
"body": null,
"is_bot": false,
"headline": "remove extlinks ext and fix ci failure",
"author_name": "shenxianpeng",
"author_login": "shenxianpeng",
"committed_at": "2025-06-07T15:43:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8566150b9a9e88876a7b7321a6314eebff7cdd01",
"body": null,
"is_bot": false,
"headline": "use sphinx-issues to align with other pypa projects",
"author_name": "shenxianpeng",
"author_login": "shenxianpeng",
"committed_at": "2025-06-03T08:53:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "717d01f19ca383be263a4424b9dafc895fb73cd8",
"body": null,
"is_bot": false,
"headline": "fix: update conf.py and clanglog.rst",
"author_name": "shenxianpeng",
"author_login": "shenxianpeng",
"committed_at": "2025-06-03T08:19:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eac4e3c72e9b071e723c7407dee4d4107b9435ff",
"body": null,
"is_bot": false,
"headline": "feat: add extlinks for issue and pull",
"author_name": "shenxianpeng",
"author_login": "shenxianpeng",
"committed_at": "2025-06-03T07:14:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e89c52f8e277f3a83cb959c278f546669dd3bdbb",
"body": "`prepare_metadata_for_build_wheel` was initially typed to return\nOptional[str] just like the editable metadata hook, but it got changed\nto `str` during review. However, the editable hook's return type was\nnever corrected. This seems to be an oversight as I can't find anything\nin the PEP 517 or 660 specifications allowing these hooks to return\nNone.\n\nCo-authored-by: Pradyun Gedam <pradyunsg@gmail.com>",
"is_bot": false,
"headline": "Correct editable metadata hook return type to str (#209)",
"author_name": "Richard Si",
"author_login": "ichard26",
"committed_at": "2025-04-13T00:22:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc02fcb33e04fed7108dd29e5056775e692f06cb",
"body": "This makes it possible for build-frontends to surface this information\nto end users.\n\n---------\n\nCo-authored-by: Pradyun Gedam <pgedam@bloomberg.net>\nCo-authored-by: Pradyun Gedam <pradyunsg@gmail.com>",
"is_bot": false,
"headline": "Forward warnings from build-backend to build-frontend (#213)",
"author_name": "Damian Shaw",
"author_login": "notatallshaw",
"committed_at": "2025-04-13T00:13:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21478a7ae4a27a228c173043817f10efe2b54779",
"body": null,
"is_bot": false,
"headline": "Remove Python 3.7 support, add Python 3.13 support (#214)",
"author_name": "Damian Shaw",
"author_login": "notatallshaw",
"committed_at": "2025-04-13T00:09:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b7c6d113fb89b755d762a88712c8a6873cddd47",
"body": "Prepare to release 1.2",
"is_bot": false,
"headline": "Merge pull request #205 from pypa/prepare-1.2",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T09:21:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "102747081953a43bcbb9304e6319de3bf2166bfc",
"body": null,
"is_bot": false,
"headline": "Bump version: 1.1.0 → 1.2.0",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T09:18:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dabe52eac18ef677af262657c97a7689b20fa909",
"body": null,
"is_bot": false,
"headline": "Prepare release notes for 1.2",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T09:18:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3df91751cb87c01b1fd2584a37ca3c186f126a48",
"body": "Relax test for build requirements from setuptools",
"is_bot": false,
"headline": "Merge pull request #204 from pypa/fix/setuptools-71",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T09:08:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9efaa97258b63108750539e440789a5cada90fd8",
"body": null,
"is_bot": false,
"headline": "Relax test for build requirements from setuptools",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T09:04:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b57973c3a8ef919dffecac8d15fd608fc51a271",
"body": "Improve interop with `importlib.metadata`: variation without `importlib_metadata`",
"is_bot": false,
"headline": "Merge pull request #199 from abravalheri/issue-192-take2",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T08:59:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9988edd23921cdf74bed88f7ae1397b1c440f385",
"body": "Ensure tests, docs, license etc. are included in sdist",
"is_bot": false,
"headline": "Merge pull request #196 from pypa/sdist-includes",
"author_name": "Jason R. Coombs",
"author_login": "jaraco",
"committed_at": "2024-07-02T17:43:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dba181736a41503f81ed73434143db7537494c76",
"body": null,
"is_bot": false,
"headline": "Always use importlib.metadata",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-02T11:14:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d68f4d94477f0c20f900b1520ef1a1193e9d4f9d",
"body": null,
"is_bot": false,
"headline": "Remove unused dev-dependency",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-01T15:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "455b77f9a89f3bfded5925ccc15e17d20c9b99cd",
"body": null,
"is_bot": false,
"headline": "Account for importlib_metadata in Python<3.7",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-01T15:27:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca5c5a522720a9c7b672a5a215fbfe6fa05caf77",
"body": null,
"is_bot": false,
"headline": "Use pytest.importorskip for importlib.metadata",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-01T15:21:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "282b8735e59df938a210e46b8cd5cd1d99344816",
"body": null,
"is_bot": false,
"headline": "Implement find_distributions for _BackendPathFinder",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-01T15:17:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff71ab62909d3d4305f16f20933173a579f7ebbc",
"body": null,
"is_bot": false,
"headline": "Add test capturing expectation about importlib.metadata",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-01T15:17:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "261e4d82121782d05f6fddfaded8b8a7493d0370",
"body": "Don't create tag automatically on bumping version number",
"is_bot": false,
"headline": "Merge pull request #197 from pypa/bumpversion-no-tag",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-05-01T06:40:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f18842e40a651386b70a49955e3dc69777d64b8",
"body": "chore: make pre-commit faster",
"is_bot": false,
"headline": "Merge pull request #198 from henryiii/patch-2",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-05-01T06:39:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64fd514e06f371a8cfe7b990fd6a6777d0f2e424",
"body": null,
"is_bot": false,
"headline": "chore: make pre-commit faster",
"author_name": "Henry Schreiner",
"author_login": "henryiii",
"committed_at": "2024-04-30T21:19:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e2183de57527e5c8533cf0fd8b5b927f829349e",
"body": null,
"is_bot": false,
"headline": "Don't create tag automatically on bumping version number",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-30T21:13:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "520a738cd183028f98f254e0294c96a687845dd6",
"body": "chore: ruff moved to astral-sh",
"is_bot": false,
"headline": "Merge pull request #172 from henryiii/patch-1",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-30T21:09:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e962d26ff15175416a7ea02517a75f65676d437b",
"body": null,
"is_bot": false,
"headline": "Update pre-commit hook versions",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-30T21:04:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "230169e344a9cd014e40a9aa00e1deabb9617a51",
"body": null,
"is_bot": false,
"headline": "chore: ruff moved to astral-sh",
"author_name": "Henry Schreiner",
"author_login": "henryiii",
"committed_at": "2024-04-30T21:03:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfb13356a4a4bb24ae7060a45362d3b4d52ef0bf",
"body": null,
"is_bot": false,
"headline": "Ensure tests, docs, license etc. are included in sdist",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-30T20:46:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e0dbe471dbf922097c30b315410f87f37217a01",
"body": "Fix path pollution again",
"is_bot": false,
"headline": "Merge pull request #193 from pradyunsg/fix-path-pollution-properly",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-30T20:25:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f71a8f5399859a9a989c51cd13a456f21f98d947",
"body": null,
"is_bot": false,
"headline": "Fix path pollution again",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2024-04-29T21:44:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a72a084b1f6cf64aa4be49aa1e971511cc5659",
"body": "CI: Update Github checkout & setup-python actions",
"is_bot": false,
"headline": "Merge pull request #190 from pypa/gha-updates",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-29T07:35:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c25acc30aeb135928df38dd0ddb22bccd02ee22e",
"body": null,
"is_bot": false,
"headline": "CI: Update Github checkout & setup-python actions",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-29T07:31:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "903ad919c7857a7321dee080e708e13afb2bd4d5",
"body": "Exclude Mac + Python 3.7 from CI matrix",
"is_bot": false,
"headline": "Merge pull request #189 from pypa/ci-rm-mac-py37",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-29T07:24:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a22b3e052ca8c9ae10445aba20d784ab7aeb63a",
"body": null,
"is_bot": false,
"headline": "Exclude Mac + Python 3.7 from CI matrix",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-29T07:21:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d79646fcac2f888a91e2ea9e17cceec19d9a2b24",
"body": "Prepare v1.1",
"is_bot": false,
"headline": "Merge pull request #188 from pypa/prepare-1.1",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-29T07:10:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7de0160e5ab3a82d2be393781577736096d6f29e",
"body": null,
"is_bot": false,
"headline": "Bump version: 1.0.0 → 1.1.0",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-24T17:37:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd15b2a55f4e1a0aa858d6195e07ecf6d6ac44cb",
"body": null,
"is_bot": false,
"headline": "Mention backend-path changes in changelog",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-24T17:35:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "debf816af9373232fbf79f1efdf37320d2e0853c",
"body": null,
"is_bot": false,
"headline": "Add back BackendInvalid as a synonym for BackendUnavailable",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-24T17:35:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c667aeb10e7d6805aed53c95e9727c3ccbaad40e",
"body": "Set up trusted publishing for making releases to PyPI",
"is_bot": false,
"headline": "Merge pull request #187 from pypa/gha-trusted-publish",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-23T08:30:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79a2edf4a3d40c842cb7916bf6622981be1751de",
"body": null,
"is_bot": false,
"headline": "Remove trailing space",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-20T16:02:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f66e6a11097c477aeb08ad5e08c01a5c8823bfda",
"body": null,
"is_bot": false,
"headline": "Specify environment for publishing job",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-20T15:59:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1248ac2f0526291771f2cab520cf82ee6323a7ca",
"body": null,
"is_bot": false,
"headline": "Set up trusted publishing for making releases to PyPI",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-20T15:49:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33953f25fd2f89eb11dd21172d78d398930da1c7",
"body": "Export `SubprocessRunner`",
"is_bot": false,
"headline": "Merge pull request #184 from layday/export-subprocess-runner",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-03-03T10:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "773b0635b6a13ca2b62a50eedec5cd31bd6f6b32",
"body": null,
"is_bot": false,
"headline": "Fix star import",
"author_name": "layday",
"author_login": "layday",
"committed_at": "2024-03-02T12:32:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1926fb2f276b4b4d9788acc9a855b024caf92ab5",
"body": "mypy in strict mode will complain that `SubprocessRunner`\nis not defined if it is not explicitly exported.",
"is_bot": false,
"headline": "Export `SubprocessRunner`",
"author_name": "layday",
"author_login": "layday",
"committed_at": "2024-02-27T19:29:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "649925ea9bae3c0590453eb64d0503000ebae58b",
"body": "Update RTD config to (hopefully) fix docs builds",
"is_bot": false,
"headline": "Merge pull request #180 from pypa/takluyver-patch-1",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2023-11-03T10:25:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "292242fd9ece1bb397689a6d1a9084d4a66c345a",
"body": null,
"is_bot": false,
"headline": "Update RTD config to (hopefully) fix docs builds",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2023-11-01T08:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b036b5acf219f980147a30652d9b53077a6e081",
"body": "Type annotate the public API",
"is_bot": false,
"headline": "Merge pull request #167 from pradyunsg/typing",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-11-01T06:24:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1eea736db62fbc95a9b36881141886064672fda3",
"body": null,
"is_bot": false,
"headline": "Remove whitespace that was accidentally added in a merge commit",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-11-01T06:17:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47a33475d85d3c0a2d14ad5657c27ac0c2b6d1a1",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into typing",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-10-31T20:53:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "084b02e8970c8e1f5e72080bdde548108aa1d111",
"body": "* Test backend is loaded from backend-path\r\n\r\n* Actively import from backend-path instead of checking\r\n\r\nPreviously `_in_process` would only modify `sys.path`, use\r\n`importlib.import_module` and hope the backend is loaded from the right\r\npath.\r\n\r\nThis would lead to misleading error messages in some \n[…]\nnvalid as no longer used/deprecated\r\n\r\n* Remove unused BackendInvalid\r\n\r\n* Test nested intree backend\r\n\r\n* Add negative tests for nested intree backends\r\n\r\n* Avoid passing nested modules to PathFinder",
"is_bot": false,
"headline": "Improve backend loading from `backend-path` (#165)",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2023-08-19T00:25:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3456dd9342b80ead9ad46cf2e37f0ecfb59e9ce",
"body": "Reduce concurrent CI runs",
"is_bot": false,
"headline": "Merge pull request #169 from pradyunsg/concurrency",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2023-04-08T14:36:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf12ccea272078bf02758b3e2a251742bd8dd0de",
"body": null,
"is_bot": false,
"headline": "Reduce concurrent CI runs",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T14:00:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "228aef1c51a3afb4a582ee005e972a01ea31ef39",
"body": null,
"is_bot": false,
"headline": "Document the usage of the subprocess protocol for type checking",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:53:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "375b8fc4606e1cf404017a267ffa89677db7a6f2",
"body": null,
"is_bot": false,
"headline": "Don't meddle with `__all__`",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:50:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c83df5dc968748a7975067bca97934b215362dc",
"body": "This makes it possible to annotate using this type, instead of relying\non redefining it.",
"is_bot": false,
"headline": "Expose `SubprocessRunner` for type checking",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:48:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db5ed31e935be57cda0d99e339e7157343cded87",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into typing",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:45:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12401f6951d11fce011945aca73cbdbe562fa663",
"body": null,
"is_bot": false,
"headline": "Fully document all parameters in the public API",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:44:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cffda1f8bca50ffab5ed0d9d71cd48640a828dc7",
"body": null,
"is_bot": false,
"headline": "Don't set an incorrect name on `nox -s release`",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:22:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1017004c9aea20c61cffa5e454bb454fb4930f28",
"body": "This information is now coming from the source code directly.",
"is_bot": false,
"headline": "Drop the return types from docstrings",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:21:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b264f595634e9156f4779ac5c96d2bb06213b5f",
"body": null,
"is_bot": false,
"headline": "Use the correct directory for documentation gitignore",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:18:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96a6691e8e19c5a6c24e4ac152e4839a0a9350aa",
"body": null,
"is_bot": false,
"headline": "Correct the type of `prepare_metadata_for_build_wheel`",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:14:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58e28143329c878cecd397c281543f1b3630267b",
"body": null,
"is_bot": false,
"headline": "Use more generic types in type annotations",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:12:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26460ba7a825320f620867e966708bb8d4ac7826",
"body": null,
"is_bot": false,
"headline": "Add a `py.typed` file to denote type annotated sources",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:09:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cf1649a071f4268578b0e7417eb017637c4a486",
"body": "This reverts commit 69ed8b1dac92e33d6a2d18c1b3a3cfad57020d90.",
"is_bot": false,
"headline": "Revert \"Drop support for Python 3.7\"",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:09:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3b5288e1c7cb959164f54042888ba35ba6e9033",
"body": "Rename various pieces to match the new project name",
"is_bot": false,
"headline": "Merge pull request #166 from pradyunsg/rename-env-var",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2023-04-08T12:56:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a2adbf217a2c1f03e41210e38c075780c2bc534",
"body": null,
"is_bot": false,
"headline": "Add changelog entry for type annotations",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:17:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87c779b41f033329181a39ea8a29485a4d9aa24a",
"body": "This ensures that the documentation build uses a well-defined Python\nversion, rather than whatever happens to be the default for the\nenvironment.",
"is_bot": false,
"headline": "Enforce a Python version in Read the Docs builds",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:10:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2cd373a66926d8d5e472a2aca14200b520efbc9",
"body": null,
"is_bot": false,
"headline": "Add support for Python 3.12",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:03:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69ed8b1dac92e33d6a2d18c1b3a3cfad57020d90",
"body": "This enables the use of newer Python typing functionality without\ncompatibility shims.",
"is_bot": false,
"headline": "Drop support for Python 3.7",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:03:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88906ab623d221f050481e9ac800da977adb643b",
"body": "This makes it behave better with newer ruff versions, and removes\nthe unused isort configuration.",
"is_bot": false,
"headline": "Update configuration for `ruff`",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:03:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb566f5ec133a2231174ca09f57a34f7f0fb664b",
"body": "This makes it easier for tools to provide completion and enhances the\ndocumentation of the API.",
"is_bot": false,
"headline": "Type annotate the public API",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:03:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62fb515f46f9c5d027db0326af67f7042542bfa7",
"body": null,
"is_bot": false,
"headline": "Add changelog section for next release",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:03:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c074f9ea383f92ccd570caa32542145f8dea077e",
"body": "This ensures that we have a clearer name that doesn't require an\nexternal-to-codebase reference to understand.",
"is_bot": false,
"headline": "Rename the test for path pollution",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-03T16:15:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1b3e545204e6b2869cf85f747dafbbfb71a5b35",
"body": "This aligns with the new project name.",
"is_bot": false,
"headline": "Rename the wheel-built marker file",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-03T14:37:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "465dc376a03329a58763a18c3263808fc1e8d7f9",
"body": "This aligns with the new project name. The underscore at the start of\nthe variable name to make it clear that it is a \"private\" variable that\nshould not be used outside of this project.",
"is_bot": false,
"headline": "Rename the environment variables to match the new project name",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-03T14:37:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56ae3eaa47ab2313fac61bf4b07ab6b5940da0ca",
"body": "Modernise the codebase with black, ruff, pre-commit and nox",
"is_bot": false,
"headline": "Merge pull request #163 from pradyunsg/modernize",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2023-02-06T15:50:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43e3f05cdb552520e9e9509ca91a9da7c9c2868a",
"body": null,
"is_bot": false,
"headline": "Ignore the black reformatting commit in git blames",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:20:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2def59940961d0893e834ba033572cd63502312d",
"body": null,
"is_bot": false,
"headline": "Trim the number of pre-commit-hooks",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae97661d7eb6fa61d6b19bbc853e49061ee95f76",
"body": null,
"is_bot": false,
"headline": "Switch from flake8 + isort to ruff",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74972d1ed9f59d0e876d654dfcb29a02ed564315",
"body": null,
"is_bot": false,
"headline": "Configure linters for blacken'd code",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1731550536179b1289db4b8ae01d1b3673162aae",
"body": "This ensures consistent code style within the project.",
"is_bot": false,
"headline": "Blacken the codebase",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fea3c004d8e7e732d7e307306f61796b618d3e4f",
"body": "This makes it more closely aligned with the development workflow for\npip.",
"is_bot": false,
"headline": "Replace tox with nox and modernize CI",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:19:47Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 18,
"commits_last_year": 9,
"latest_release_at": "2024-09-29T09:21:41Z",
"latest_release_tag": "v1.2.0",
"releases_from_tags": true,
"days_since_last_push": 107,
"active_weeks_last_year": 4,
"days_since_latest_release": 660,
"mean_days_between_releases": 160.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "pyproject_hooks",
"exists": true,
"license": null,
"keywords": [
"License :: OSI Approved :: MIT License",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3 :: Only"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/pyproject_hooks/",
"is_deprecated": false,
"latest_version": "1.2.0",
"repository_url": "https://github.com/pypa/pyproject-hooks",
"versions_count": 4,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2021-12-03T13:45:22.992320Z",
"latest_published_at": "2024-09-29T09:24:13.293934Z",
"latest_version_yanked": null,
"days_since_latest_publish": 660
}
]
},
"popularity": {
"forks": 58,
"stars": 128,
"watchers": 13,
"fork_history": {
"days": [
{
"date": "2018-07-21",
"count": 1
},
{
"date": "2018-09-11",
"count": 1
},
{
"date": "2019-02-01",
"count": 1
},
{
"date": "2019-07-10",
"count": 1
},
{
"date": "2019-08-16",
"count": 1
},
{
"date": "2019-09-14",
"count": 1
},
{
"date": "2019-11-13",
"count": 1
},
{
"date": "2020-04-14",
"count": 1
},
{
"date": "2020-04-25",
"count": 1
},
{
"date": "2020-07-10",
"count": 1
},
{
"date": "2020-08-01",
"count": 1
},
{
"date": "2020-09-15",
"count": 1
},
{
"date": "2020-11-23",
"count": 3
},
{
"date": "2021-01-28",
"count": 1
},
{
"date": "2021-01-31",
"count": 1
},
{
"date": "2021-03-10",
"count": 1
},
{
"date": "2021-05-28",
"count": 1
},
{
"date": "2021-06-11",
"count": 1
},
{
"date": "2021-07-30",
"count": 1
},
{
"date": "2021-10-06",
"count": 1
},
{
"date": "2021-11-23",
"count": 1
},
{
"date": "2021-12-03",
"count": 1
},
{
"date": "2022-01-10",
"count": 1
},
{
"date": "2022-05-31",
"count": 1
},
{
"date": "2022-06-15",
"count": 1
},
{
"date": "2022-06-28",
"count": 1
},
{
"date": "2022-09-11",
"count": 1
},
{
"date": "2022-10-17",
"count": 1
},
{
"date": "2022-10-31",
"count": 1
},
{
"date": "2023-02-22",
"count": 1
},
{
"date": "2023-02-28",
"count": 1
},
{
"date": "2023-03-01",
"count": 1
},
{
"date": "2023-04-26",
"count": 1
},
{
"date": "2023-07-03",
"count": 1
},
{
"date": "2023-08-02",
"count": 1
},
{
"date": "2023-08-24",
"count": 1
},
{
"date": "2023-10-26",
"count": 1
},
{
"date": "2023-11-01",
"count": 1
},
{
"date": "2024-02-14",
"count": 1
},
{
"date": "2024-02-27",
"count": 1
},
{
"date": "2024-06-07",
"count": 1
},
{
"date": "2024-06-20",
"count": 1
},
{
"date": "2024-06-26",
"count": 1
},
{
"date": "2024-09-19",
"count": 1
},
{
"date": "2024-12-26",
"count": 1
},
{
"date": "2025-03-20",
"count": 1
},
{
"date": "2025-04-10",
"count": 1
},
{
"date": "2025-04-12",
"count": 1
},
{
"date": "2025-04-25",
"count": 1
},
{
"date": "2025-11-28",
"count": 1
},
{
"date": "2026-01-30",
"count": 1
},
{
"date": "2026-02-16",
"count": 1
},
{
"date": "2026-03-09",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-07-03",
"count": 1
}
],
"complete": true,
"collected": 58,
"total_forks": 58
},
"star_history": {
"days": [
{
"date": "2017-07-13",
"count": 1
},
{
"date": "2017-08-28",
"count": 1
},
{
"date": "2018-05-12",
"count": 1
},
{
"date": "2018-08-01",
"count": 1
},
{
"date": "2018-08-21",
"count": 1
},
{
"date": "2018-08-30",
"count": 1
},
{
"date": "2018-10-13",
"count": 1
},
{
"date": "2018-12-30",
"count": 1
},
{
"date": "2019-01-14",
"count": 1
},
{
"date": "2019-02-11",
"count": 1
},
{
"date": "2019-02-22",
"count": 1
},
{
"date": "2019-03-20",
"count": 1
},
{
"date": "2019-03-30",
"count": 1
},
{
"date": "2019-04-26",
"count": 1
},
{
"date": "2019-05-13",
"count": 1
},
{
"date": "2019-06-09",
"count": 1
},
{
"date": "2019-07-21",
"count": 1
},
{
"date": "2019-08-14",
"count": 1
},
{
"date": "2019-08-17",
"count": 1
},
{
"date": "2019-10-25",
"count": 1
},
{
"date": "2019-11-13",
"count": 1
},
{
"date": "2019-11-14",
"count": 1
},
{
"date": "2019-11-25",
"count": 1
},
{
"date": "2020-01-06",
"count": 1
},
{
"date": "2020-02-03",
"count": 1
},
{
"date": "2020-02-14",
"count": 1
},
{
"date": "2020-02-20",
"count": 1
},
{
"date": "2020-03-13",
"count": 1
},
{
"date": "2020-04-01",
"count": 1
},
{
"date": "2020-04-02",
"count": 1
},
{
"date": "2020-04-03",
"count": 1
},
{
"date": "2020-04-19",
"count": 1
},
{
"date": "2020-05-03",
"count": 1
},
{
"date": "2020-05-19",
"count": 1
},
{
"date": "2020-06-08",
"count": 1
},
{
"date": "2020-07-21",
"count": 2
},
{
"date": "2020-08-01",
"count": 1
},
{
"date": "2020-08-03",
"count": 1
},
{
"date": "2020-08-18",
"count": 1
},
{
"date": "2020-09-20",
"count": 1
},
{
"date": "2020-10-04",
"count": 1
},
{
"date": "2020-10-08",
"count": 1
},
{
"date": "2020-10-29",
"count": 1
},
{
"date": "2020-11-13",
"count": 1
},
{
"date": "2020-11-17",
"count": 1
},
{
"date": "2020-11-24",
"count": 1
},
{
"date": "2020-12-15",
"count": 1
},
{
"date": "2021-01-11",
"count": 1
},
{
"date": "2021-01-29",
"count": 1
},
{
"date": "2021-01-31",
"count": 1
},
{
"date": "2021-03-02",
"count": 1
},
{
"date": "2021-03-10",
"count": 1
},
{
"date": "2021-03-15",
"count": 1
},
{
"date": "2021-03-23",
"count": 1
},
{
"date": "2021-03-26",
"count": 1
},
{
"date": "2021-04-29",
"count": 1
},
{
"date": "2021-07-15",
"count": 1
},
{
"date": "2021-07-17",
"count": 1
},
{
"date": "2021-07-30",
"count": 1
},
{
"date": "2021-08-01",
"count": 1
},
{
"date": "2021-10-02",
"count": 1
},
{
"date": "2021-10-17",
"count": 1
},
{
"date": "2021-11-01",
"count": 1
},
{
"date": "2021-11-02",
"count": 1
},
{
"date": "2021-11-05",
"count": 1
},
{
"date": "2021-11-20",
"count": 1
},
{
"date": "2022-01-24",
"count": 1
},
{
"date": "2022-02-02",
"count": 1
},
{
"date": "2022-02-03",
"count": 1
},
{
"date": "2022-02-05",
"count": 1
},
{
"date": "2022-02-07",
"count": 1
},
{
"date": "2022-02-26",
"count": 1
},
{
"date": "2022-04-26",
"count": 1
},
{
"date": "2022-06-19",
"count": 1
},
{
"date": "2022-09-06",
"count": 1
},
{
"date": "2022-09-09",
"count": 1
},
{
"date": "2022-09-12",
"count": 1
},
{
"date": "2022-09-13",
"count": 1
},
{
"date": "2022-09-19",
"count": 1
},
{
"date": "2022-12-01",
"count": 1
},
{
"date": "2023-01-02",
"count": 1
},
{
"date": "2023-02-28",
"count": 1
},
{
"date": "2023-03-01",
"count": 1
},
{
"date": "2023-03-09",
"count": 1
},
{
"date": "2023-03-28",
"count": 1
},
{
"date": "2023-04-09",
"count": 1
},
{
"date": "2023-05-04",
"count": 1
},
{
"date": "2023-05-20",
"count": 1
},
{
"date": "2023-06-03",
"count": 1
},
{
"date": "2023-06-15",
"count": 1
},
{
"date": "2023-06-26",
"count": 1
},
{
"date": "2023-08-28",
"count": 1
},
{
"date": "2023-10-16",
"count": 1
},
{
"date": "2023-10-26",
"count": 1
},
{
"date": "2023-10-27",
"count": 2
},
{
"date": "2023-10-31",
"count": 1
},
{
"date": "2023-11-15",
"count": 1
},
{
"date": "2023-12-01",
"count": 2
},
{
"date": "2023-12-05",
"count": 1
},
{
"date": "2024-02-06",
"count": 1
},
{
"date": "2024-02-09",
"count": 1
},
{
"date": "2024-02-19",
"count": 2
},
{
"date": "2024-02-22",
"count": 1
},
{
"date": "2024-03-06",
"count": 1
},
{
"date": "2024-03-15",
"count": 1
},
{
"date": "2024-03-20",
"count": 1
},
{
"date": "2024-03-23",
"count": 1
},
{
"date": "2024-04-30",
"count": 1
},
{
"date": "2024-05-07",
"count": 1
},
{
"date": "2024-05-19",
"count": 1
},
{
"date": "2024-05-21",
"count": 1
},
{
"date": "2024-05-31",
"count": 1
},
{
"date": "2024-07-03",
"count": 1
},
{
"date": "2024-07-18",
"count": 1
},
{
"date": "2024-08-15",
"count": 1
},
{
"date": "2024-10-06",
"count": 2
},
{
"date": "2024-10-25",
"count": 1
},
{
"date": "2025-01-11",
"count": 1
},
{
"date": "2025-01-30",
"count": 1
},
{
"date": "2025-03-27",
"count": 1
},
{
"date": "2025-04-28",
"count": 1
},
{
"date": "2025-07-21",
"count": 1
},
{
"date": "2026-02-22",
"count": 1
}
],
"complete": true,
"collected": 128,
"total_stars": 128
},
"open_issues_and_prs": 16
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"samples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"noxfile.py"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"src/pyproject_hooks/py.typed"
],
"toolchain_manifests": [],
"largest_source_bytes": 15456,
"source_files_sampled": 26,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"docs/requirements.txt",
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 3,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 8,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "build",
"direct": false,
"version": "1.4.2",
"ecosystem": "pypi"
},
{
"name": "flake8",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "furo",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": false,
"version": "26.0",
"ecosystem": "pypi"
},
{
"name": "pyproject-hooks",
"direct": false,
"version": "1.2.0",
"ecosystem": "pypi"
},
{
"name": "pytest",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "setuptools",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "sphinx",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "sphinx-issues",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "testpath",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "tomli",
"direct": false,
"version": null,
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 11,
"direct_count": 0,
"indirect_count": 11
}
},
"maintainership": {
"issues": {
"open_prs": 5,
"merged_prs": 102,
"open_issues": 11,
"closed_ratio": 0.891,
"closed_issues": 90,
"closed_unmerged_prs": 21
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "takluyver",
"commits": 178,
"avatar_url": "https://avatars.githubusercontent.com/u/327925?v=4"
},
{
"type": "User",
"login": "jaraco",
"commits": 69,
"avatar_url": "https://avatars.githubusercontent.com/u/308610?v=4"
},
{
"type": "User",
"login": "pradyunsg",
"commits": 66,
"avatar_url": "https://avatars.githubusercontent.com/u/3275593?v=4"
},
{
"type": "User",
"login": "pfmoore",
"commits": 26,
"avatar_url": "https://avatars.githubusercontent.com/u/1110419?v=4"
},
{
"type": "User",
"login": "sbidoul",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/692075?v=4"
},
{
"type": "User",
"login": "hexagonrecursion",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/52621858?v=4"
},
{
"type": "User",
"login": "graingert",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/413772?v=4"
},
{
"type": "User",
"login": "hugovk",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/1324225?v=4"
},
{
"type": "User",
"login": "abravalheri",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/320755?v=4"
},
{
"type": "User",
"login": "duckinator",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/39698?v=4"
}
],
"contributors_sampled": 32,
"top_contributor_share": 0.412
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 5,
"reason": "7 out of 13 merged PRs checked by a CI test -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 8,
"reason": "Found 11/13 approved changesets -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 84 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 6,
"reason": "dependency not pinned by hash detected -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d9ee8a0fe9f1fe351187ff85965a8b8fcb7e78a6",
"ran_at": "2026-07-21T23:15:53Z",
"aggregate_score": 5.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-04-05T19:05:39Z",
"oldest_open_prs": [
{
"number": 181,
"created_at": "2023-11-01T20:53:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 215,
"created_at": "2025-05-09T15:00:48Z",
"last_comment_at": "2025-05-22T13:12:21Z",
"last_comment_author": "notatallshaw"
},
{
"number": 216,
"created_at": "2025-05-22T16:29:11Z",
"last_comment_at": "2025-06-07T11:48:39Z",
"last_comment_author": "takluyver"
},
{
"number": 227,
"created_at": "2026-06-04T19:23:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 230,
"created_at": "2026-07-03T05:17:52Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-04-05T19:03:53Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 10,
"created_at": "2018-08-01T10:00:55Z",
"last_comment_at": "2023-03-07T01:35:46Z",
"last_comment_author": "vkottler"
},
{
"number": 148,
"created_at": "2022-08-26T09:02:32Z",
"last_comment_at": "2022-09-12T08:29:42Z",
"last_comment_author": "commodo"
},
{
"number": 156,
"created_at": "2022-11-18T12:42:32Z",
"last_comment_at": "2022-11-18T14:51:14Z",
"last_comment_author": "pradyunsg"
},
{
"number": 157,
"created_at": "2022-11-18T12:48:52Z",
"last_comment_at": "2026-02-18T15:28:13Z",
"last_comment_author": "takluyver"
},
{
"number": 168,
"created_at": "2023-04-07T10:05:35Z",
"last_comment_at": "2025-04-13T19:16:33Z",
"last_comment_author": "notatallshaw"
},
{
"number": 177,
"created_at": "2023-08-29T17:36:25Z",
"last_comment_at": "2025-03-06T20:40:07Z",
"last_comment_author": "webknjaz"
},
{
"number": 206,
"created_at": "2024-10-06T04:27:21Z",
"last_comment_at": "2024-10-30T15:05:14Z",
"last_comment_author": "abravalheri"
},
{
"number": 207,
"created_at": "2024-10-07T09:51:14Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 208,
"created_at": "2024-11-05T00:02:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 226,
"created_at": "2026-04-09T19:22:41Z",
"last_comment_at": "2026-05-19T10:35:31Z",
"last_comment_author": "takluyver"
},
{
"number": 228,
"created_at": "2026-06-06T18:43:42Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/pypa/pyproject-hooks",
"host": "github.com",
"name": "pyproject-hooks",
"owner": "pypa"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"security": 67,
"vitality": 29,
"community": 60,
"governance": 74,
"engineering": 90
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "critical",
"name": "Vitality",
"value": 29,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"commits_last_year": 9,
"human_commit_share": 1,
"days_since_last_push": 107,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 107 days ago",
"points": 9.9,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 107
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "9 commits in the last year",
"points": 9,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 9
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"releases_count": 18,
"latest_release_tag": "v1.2.0",
"releases_from_tags": true,
"days_since_latest_release": 660,
"mean_days_between_releases": 160.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "18 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 18
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 660 days ago",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 660
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~160.2 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 160.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 107,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 107 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 107
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 60,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"forks": 58,
"stars": 128,
"watchers": 13,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "128 stars",
"points": 34.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 128
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "58 forks",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 58
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "13 watchers",
"points": 6,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 13
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 74,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 32,
"top_contributor_share": 0.412
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 41% of commits",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 41
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "32 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 32
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 84 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"merged_prs": 102,
"open_issues": 11,
"closed_issues": 90,
"issue_closed_ratio": 0.891,
"closed_unmerged_prs": 21
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "89% of issues closed",
"points": 41.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 89
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "102/123 decided PRs merged",
"points": 31.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 102,
"decided": 123
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 11/13 approved changesets -- score normalized to 8",
"points": 12,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"followers": 2375,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "pypa",
"public_repos": 59,
"account_age_days": 5620
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2,375 followers of pypa",
"points": 24.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2375,
"login": "pypa"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "59 public repos, account ~15 yr old",
"points": 24.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 59
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"packages": [
"pyproject_hooks"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 660
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 660 days ago",
"points": 14,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 660
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "4 published versions",
"points": 12,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 4
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 90,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 16,
"status": "met",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 13 merged PRs checked by a CI test -- score normalized to 5",
"points": 10,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"python",
"packaging"
],
"has_wiki": true,
"homepage": "https://pyproject-hooks.readthedocs.io/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://pyproject-hooks.readthedocs.io/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "2 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 2
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 67,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 13 merged PRs checked by a CI test -- score normalized to 5",
"points": 1.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 11/13 approved changesets -- score normalized to 8",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 84 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 3,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 3 resolved dependencies against OSV; 8 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 3
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 8
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 3,
"unassessed_packages": 8,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 3,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 30
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 52,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 23,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.43,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "43 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 22.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 43,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [
"noxfile.py"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"src/pyproject_hooks/py.typed"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "noxfile.py",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "noxfile.py"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 11,
"status": "met",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "src/pyproject_hooks/py.typed",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "src/pyproject_hooks/py.typed"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 15456,
"source_files_sampled": 26,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (src/pyproject_hooks/py.typed)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "src/pyproject_hooks/py.typed",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/26 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 26,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"samples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-21T23:16:20.657300Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pypa/pyproject-hooks.svg",
"full_name": "pypa/pyproject-hooks",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — PyPI.