PythonCustom license★ 347 stars⑂ 98 forkssince Nov 2012View on GitHub ↗
requests/requests-ntlm holds a health index of 42 out of 100, placing it in the At risk band. It scores highest on Sustainability & Governance (70/100) and lowest on Vitality (19/100). It was last updated 137 days ago. 3 contributors account for most of its recent work.
42
overall / 100
At risk
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
42
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Abandonment Policy applies a 85% multiplier to weighted overall health.
no human commit in 781 daysautomated commits excludedissues left unansweredOpenSSF Scorecard reports it unmaintained
Silence alone is never the finding — a small, finished library may need no commits for years. This alert requires both: no human commit for a long time, and obligations the project is visibly not discharging. Automated commits do not count as maintenance.
Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25
Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
0
affected_packages
0
assessed_packages
9
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:requests_ntlm@1.3.0 runtime dependency closure — what installing the published package pulls in — 9 packages. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Type-checkable code — Python with type-check config (requests_ntlm/py.typed)
55/55
Manageable file sizes — 0/10 source files over 60KB
Inputs used
primary_language
Python
largest_source_bytes
17,424
source_files_sampled
10
oversized_source_files
0
Key facts
347GitHub stars
23contributors
0commits, last 12 months
137days since last push
5releases
3bus factor
25open issues
PyPIpackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 98 ⇿
0Stars
98Forks
5Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 5Patch 0
Each point covers 11 days.
OpenSSF Scorecard 3.3 / 10
3.3aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-28 14:48 UTC
Full resolved dependency set from the GitHub dependency graph: 3 direct and 7 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
PyPI
cryptography
—
direct
PyPI
pyspnego
—
direct
PyPI
requests
—
direct
PyPI
black
24.4.2
indirect
PyPI
flask
—
indirect
PyPI
isort
5.13.2
indirect
PyPI
mypy
1.10.0
indirect
PyPI
pytest
—
indirect
PyPI
pytest-cov
—
indirect
PyPI
types-requests
—
indirect
Dependency advisories 0
Installing pypi:requests_ntlm@1.3.0 pulls in 9 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 126,
"has_wiki": true,
"homepage": null,
"languages": {
"Python": 34467,
"PowerShell": 3476
},
"pushed_at": "2026-03-12T21:01:51Z",
"created_at": "2012-11-15T14:26:00Z",
"owner_type": "Organization",
"updated_at": "2026-06-24T04:59:08Z",
"description": "NTLM authentication support for Requests.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "master",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "requests",
"company": null,
"location": null,
"followers": 84,
"avatar_url": "https://avatars.githubusercontent.com/u/2805331?v=4",
"created_at": "2012-11-15T14:23:22Z",
"is_verified": null,
"public_repos": 17,
"account_age_days": 5003
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2024-06-09T23:50:47Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2023-02-15T20:26:26Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2017-10-18T00:16:03Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2015-07-20T14:48:57Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2014-12-23T17:10:40Z"
}
],
"recent_commits": [
{
"oid": "717339ff800830e60fbd62294cb3033ee9a04a66",
"body": "Updates CI to use new action versions that are not deprecated. Bumps the\r\nversion of the package to reflect the latest changes and add\r\n.git-blame-ignore-revs so the GitHub UI blame will ignore the black\r\nformatting changes.",
"is_bot": false,
"headline": "Update CI and version and ignore black diff (#141)",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2024-06-07T00:07:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "986a8ad007d7621a464ddee681769fc186a4ed01",
"body": null,
"is_bot": false,
"headline": "Apply bulk black and isort changes",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2024-06-07T00:00:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f71c99985e0a1481ab0e7e2e62dd212ddef3969",
"body": "Adds type annotation to the library including mypy sanity checks. Also\nadds black and isort as the builtin sanity tests.\n\nThe MANIFEST.in has been updated to also include other files that should\nbe present in the sdist for people repackaging the library.",
"is_bot": false,
"headline": "Add type annotation and black/isort checks",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2024-06-07T00:00:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0256cec6f74372ca2153a5560c9dfe42f174061d",
"body": "Provides actual values for the SPN target name on the NTLM payloads.\r\nAlso favours the pure NTLM provider in the spnego library if a username\r\nand password are provided. This is done for backwards compatibility with\r\nolder releases of this library which didn't use SSPI.",
"is_bot": false,
"headline": "Favour pure NTLM provider and fix SPN (#137)",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2024-06-06T23:18:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1488ba9b173b50207c90f442827fab5ff493c17f",
"body": "* Throw an exception in case of access denied\r\n\r\n* Update requests_ntlm/requests_ntlm.py\r\n\r\nCo-authored-by: Jordan Borean <jborean93@gmail.com>\r\n\r\n* Minor tweak and add test for scenario\r\n\r\n---------\r\n\r\nCo-authored-by: Jordan Borean <jborean93@gmail.com>",
"is_bot": false,
"headline": "Throw an exception in case of access denied (#138)",
"author_name": "Adrian Vollmer",
"author_login": "AdrianVollmer",
"committed_at": "2023-10-18T07:43:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b80f1c72eb3fd974b2576c303c49b2048ef9e80d",
"body": "…#135)",
"is_bot": false,
"headline": "Fix type annotation problem by setting correct pyspnego min version (…",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2023-04-12T20:11:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83aab6d61a1408ff63361863902c1d0ecb29b6cc",
"body": null,
"is_bot": false,
"headline": "Add pyproject.toml for PEP518 compliance (#131)",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2023-02-15T20:23:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cbefb74eb3e27a0a8ae0a19182617b6dd5e7b13",
"body": null,
"is_bot": false,
"headline": "Update link in readme",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2023-02-06T21:09:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21cbaf28acb3ac2d10662aa50363e1e8c9b87358",
"body": "* Migrate to PySPNEGO\r\n\r\nThe ntlm_auth library is deprecated in favour of pyspnego. This commit\r\nmigrates to this library, patching some methods to ensure dependent code\r\nwill continue to work.\r\n\r\n* Remove domain parsing tests\r\n\r\nPySPNEGO handles the parsing of the domain component of the username\r\n\n[…]\n password, so test\r\nthat this is functioning properly.\r\n\r\n* Update CBT and SessionSecurity code\r\n\r\n* Fix up tests\r\n\r\n* Update readme\r\n\r\n---------\r\n\r\nCo-authored-by: Jordan Borean <jborean93@gmail.com>",
"is_bot": false,
"headline": "Migrate to PySPNEGO (#126)",
"author_name": "clubby789",
"author_login": "clubby789",
"committed_at": "2023-02-06T21:03:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5709bc427049ff5ca25d3a4c411c7bb7ea148163",
"body": null,
"is_bot": false,
"headline": "Migrate to GHA for CI (#129)",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2023-02-06T20:10:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f71fee60aa64c17941114d4eae40aed670a77afd",
"body": "don't document the unused `session` parameter",
"is_bot": false,
"headline": "Merge pull request #97 from t-8ch/master",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2017-09-19T18:06:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bb663a0225e3ee74f4962084a173b70c9d6cfca",
"body": null,
"is_bot": false,
"headline": "don't document the unused `session` parameter",
"author_name": "Thomas Weißschuh",
"author_login": "t-8ch",
"committed_at": "2017-09-19T10:17:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06e87a2577d6e2ea6b70378a7b56499b5f8c7c5f",
"body": "Support CBT Hashes larger than SHA256",
"is_bot": false,
"headline": "Merge pull request #94 from jborean93/cbt-hashes",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2017-06-30T08:03:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2e6d0bf3fec2ea289c1a901cdef8158b756a290",
"body": "…graphy version",
"is_bot": false,
"headline": "further improvements around override flags and setting minimum crypto…",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2017-06-29T20:45:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4da00151901dd34b3066b67b79c620d21063c26",
"body": null,
"is_bot": false,
"headline": "changed process to use cryptography instead",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2017-06-29T10:14:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d80407be6479d48db5604f2cbb06c4548c4b947",
"body": "…s before running",
"is_bot": false,
"headline": "Fixed up tests and get travis to install the latest pip and setuptool…",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2017-05-30T11:48:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52afc3ef5a9159f18d23829943705254dac4faca",
"body": null,
"is_bot": false,
"headline": "Added support for CBT when using hashes that is not MD5/SHA1/SHA256",
"author_name": "Jordan Borean",
"author_login": "jborean93",
"committed_at": "2017-05-30T08:43:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9708c3b4b362c8e6d25c9d5f3c761e30f92292f3",
"body": "Remove domain parsing for UPN-formatted names",
"is_bot": false,
"headline": "Merge pull request #89 from nitzmahone/no_parse_upn",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2016-12-19T12:10:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5e45fc6cee838af53e6b6a50c0090cd489c021f",
"body": "Turns out domain should be null for UPN (according to https://msdn.microsoft.com/en-us/library/windows/desktop/aa378184(v=vs.85).aspx), and breaks default domain handling for alternate UPN suffixes (eg, email-address-as-domain-username). \n\nUpdated tests to match current behavior.",
"is_bot": false,
"headline": "Remove domain parsing for UPN-formatted names",
"author_name": "Matt Davis",
"author_login": "nitzmahone",
"committed_at": "2016-12-17T02:50:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b04ed006031794306fd18ab4fdafc552d1d1cf9d",
"body": "Added support for NTLMv2 Authentication",
"is_bot": false,
"headline": "Merge pull request #84 from jborean93/ntlmv2-support",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2016-12-02T11:49:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ee4380361d4737a48170e872839738040a14e75",
"body": null,
"is_bot": false,
"headline": "minor indentation fix",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-11-25T21:15:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "495cad62110c371623fed723884229afa14c5995",
"body": null,
"is_bot": false,
"headline": "added unicode casting to NTLM messages",
"author_name": "Jordan Borean",
"author_login": null,
"committed_at": "2016-11-25T12:47:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc5ef4130a579d25675dd9088c5bdb457165adfd",
"body": null,
"is_bot": false,
"headline": "changes requested in review, added more checks to server",
"author_name": "Jordan Borean",
"author_login": null,
"committed_at": "2016-11-25T12:25:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08a1d7f1e65640a328ef9e5e21d08801aee5904c",
"body": null,
"is_bot": false,
"headline": "more changes from pull request review",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-11-24T11:18:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89c263d5a7472ddd18407d31962b11ab6f341a73",
"body": "…tead for the tests. Changed check on whether the socket has a certificate available",
"is_bot": false,
"headline": "Removed mocking functions and will just validate the message type ins…",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-11-23T22:23:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06637cec7a94f797dfbf41de7e8ad254000bcc27",
"body": null,
"is_bot": false,
"headline": "Bumped version to 1.0.0",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-11-09T21:33:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8f1cec3371d8b9cb4f560f144134e607a6207e5",
"body": "…it is harder to mock out\n\n* converted long string to use implicit line continuation to match standards set\n* Added more documentation around session_security and what it is used for\n* Instead of creating a new socket to get server certificate, it will now reutilise the existing socket",
"is_bot": false,
"headline": "* remove test_server_certificate now that the method has changed and …",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-10-20T10:22:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d82f3a14da874cf60916dd8eb82634a8fec7b3dd",
"body": "…TLM features\n\n* Adding in the ability to let libraries calling requests_ntlm to encrypt and decrypt messages using NTLM signing and sealing\n* Added support for Channel Binding Tokens when authenticating\n* Updated the tests to match Microsoft documentation\n* Updated readme and setup.py to reflect these changes",
"is_bot": false,
"headline": "* Changed ntlm dependency to one that support NTLMv2 auth and other N…",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-10-19T21:02:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a74e60606d5e0f457908a431e9b219e0d2de5379",
"body": null,
"is_bot": false,
"headline": "Remove travis comments.",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2016-10-19T08:34:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da382a17ff75ea9460b605bc5a7df73a109b3de2",
"body": "CI Testing",
"is_bot": false,
"headline": "Merge pull request #80 from jborean93/master",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2016-10-19T08:31:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7493d5afb3a010df17ee958ffeced1e7124bf3bb",
"body": "…o use with the requests organisation. Still keeping the functional tests in case someone wishes to run it manually",
"is_bot": false,
"headline": "Removed appveyor functional tests as we cannot get a function token t…",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-10-18T21:18:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "892c016d4f3a6065c50578dce1ac8b4a295e1b1f",
"body": "Pass correct flags to python-ntlm3 when no domain is specified.",
"is_bot": false,
"headline": "Merge pull request #83 from oliparcol/issue/82",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2016-10-12T13:16:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1683c9fc2e3338b9b3d6c0b8ccfc82f9177ea5d9",
"body": null,
"is_bot": false,
"headline": "Correcting pull request style issues.",
"author_name": "Olivier Parent-Colombel",
"author_login": "oliparcol",
"committed_at": "2016-10-04T14:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed0c20138fec8873997c3bccbae91665afa069c0",
"body": "This commit fixes #82",
"is_bot": false,
"headline": "Pass correct flags to python-ntlm3 when no domain is specified.",
"author_name": "Olivier Parent-Colombel",
"author_login": "oliparcol",
"committed_at": "2016-09-21T17:33:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "411864be9c39f3d8a89c274f54764b9ce51c7a1d",
"body": "* Removed IDE specific files in .gitignore\n* Changed travis install to use pip to install package\n* Changed README badges to use requests instead of jborean93. Still need new appveyor token\n* Simplified functional tests when calling requests\n* Removed unittest fallback\n* Removed unittest inherit from the functional test as we are running with py.test\n* Removed uneeded info in tests __init__.py files\n* Changed wildcard imports",
"is_bot": false,
"headline": "Incorporating changes in pull request;",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-08-30T01:55:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0b8fca4af6cd94143b211946b973f8d7f79aba1",
"body": null,
"is_bot": false,
"headline": "Fixed up contributors name, added new lines where needed",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-08-29T21:36:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00e218c382072912820e537d6e5ec62d8c489839",
"body": null,
"is_bot": false,
"headline": "Removed accidental file",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-08-29T21:30:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7b3047ab09883ba32683b38efc1303f28326c56",
"body": null,
"is_bot": false,
"headline": "Created common test utils which will be expanded at a later stage",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-08-29T21:16:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9aafaf51e5e58e267b7f894cb3f038a34191928b",
"body": null,
"is_bot": false,
"headline": "Added travis-ci and appveyor functionality with coverage.",
"author_name": "BOREAN, Jordan",
"author_login": null,
"committed_at": "2016-08-29T21:08:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca026d3a473484cf813d08f3afcaf3b119039059",
"body": "add license title",
"is_bot": false,
"headline": "Merge pull request #74 from waldyrious/patch-1",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2016-07-06T07:27:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d742e0030a07a0e7597b436ea8d6ce41cdf9ff8e",
"body": "same rationale as https://github.com/requests/requests-oauthlib/pull/242",
"is_bot": false,
"headline": "add license title",
"author_name": "Waldir Pimenta",
"author_login": "waldyrious",
"committed_at": "2016-07-05T22:36:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5880d3ef29954a4542c235804249fece5613050",
"body": "Refactor to pass auth_type in proxy challenge.",
"is_bot": false,
"headline": "Merge pull request #73 from requests/issue/72",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2016-06-30T09:18:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2272375eee18eb58077b53ca77b2cee36db84ef",
"body": null,
"is_bot": false,
"headline": "Refactor to pass auth_type in proxy challenge.",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2016-06-30T09:17:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dee1880d3ce58bd9dd66e4f929b7939569c85198",
"body": null,
"is_bot": false,
"headline": "Bump version to 0.3.0",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2016-05-06T14:27:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4006dba806b7125a90fdb04eae2302deb6df3be7",
"body": "add negotiate support",
"is_bot": false,
"headline": "Merge pull request #68 from nitzmahone/negotiate_support",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2016-04-01T08:18:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68d82b5c1cef6aaea65aab6be96b3da0c33b93a1",
"body": "updated tests to exercise NTLM, Negotiate, and both",
"is_bot": false,
"headline": "add negotiate support",
"author_name": "nitzmahone",
"author_login": "nitzmahone",
"committed_at": "2016-03-31T23:35:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a283a7a1e7662770becf81b15cf00c61968d769",
"body": "Closes #63",
"is_bot": false,
"headline": "Merge branch 'pr/63'",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2015-10-31T16:29:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff91cf3a04545944f4c3b3d6672ddb4bedf6c230",
"body": "Needed to strip some whitespace.\n\nResolves #62.",
"is_bot": false,
"headline": "Fix issue with header string splitting",
"author_name": "Zitrax",
"author_login": "Zitrax",
"committed_at": "2015-10-31T16:28:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93afb1dff6ed468413678144c03dc02b215d16f7",
"body": null,
"is_bot": false,
"headline": "v0.2.0",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2015-07-18T09:01:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35252865821fdada0f39090880b280145eed6a79",
"body": null,
"is_bot": false,
"headline": "Bump requests dependency to 2.0.0",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2015-07-18T09:01:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "231c1f5eb9269845d5fc39f0609f99a7ebb6f45c",
"body": null,
"is_bot": false,
"headline": "Basic cleanups",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2015-07-18T09:01:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7d2b067e0336045bbc2d3baf605dcb54c3a648d",
"body": "Reuse connections (variation of PR #51)",
"is_bot": false,
"headline": "Merge pull request #57 from exvito/reuse-conn",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2015-07-18T08:58:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f756c712d535d413f7e29bc830bed7b523c43ff9",
"body": "Inspired in requests.auth.HTTPDigestAuth.handle_401.",
"is_bot": false,
"headline": "Reuse connections",
"author_name": "exvito",
"author_login": "exvito",
"committed_at": "2015-03-30T11:18:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0db8ca4b12993c48981ad756b9f2f54776c3e6c",
"body": "Adjust all requirement listings to python-ntlm3",
"is_bot": false,
"headline": "Merge pull request #55 from noris-network/requirements-fix",
"author_name": "Ben Toews",
"author_login": "mastahyeti",
"committed_at": "2015-02-26T20:15:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebcf932455cc3f1e3e52f2882b92e0fe037170e3",
"body": "There currently isn't much documentation, but the only doc file used to\nbe an out-of-date copy of the main README.",
"is_bot": false,
"headline": "Symlink 'docs/index.rst' to 'README.rst'",
"author_name": "Felix Dreissig",
"author_login": "F30",
"committed_at": "2015-02-26T09:33:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b56f3a2bf303919f93e7f818559680464760a9d8",
"body": "'setup.py' was updated in @19c21c6, but 'README.rst' and\n'requirements.txt' weren't.",
"is_bot": false,
"headline": "Adjust all requirement listings to python-ntlm3",
"author_name": "Felix Dreissig",
"author_login": "F30",
"committed_at": "2015-02-26T09:21:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d27c1d4785e7b6f13e8730226682d4f4986b5bb",
"body": "Update setup.py",
"is_bot": false,
"headline": "Merge pull request #53 from hickford/patch-2",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-12-24T01:37:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0da8b8a07a2c7c4dfce830b7316869867d0cb5f5",
"body": null,
"is_bot": false,
"headline": "Update setup.py",
"author_name": "Matt Hickford",
"author_login": "hickford",
"committed_at": "2014-12-24T00:41:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37551317e5564d8d90507abe1bf963e3afa1e7bc",
"body": null,
"is_bot": false,
"headline": "release 0.1.0",
"author_name": "Ben Toews",
"author_login": "mastahyeti",
"committed_at": "2014-12-23T16:48:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f45070ceb8933cd7707085ed0d75b7b607651eb7",
"body": "Python 3 compatibility",
"is_bot": false,
"headline": "Merge pull request #52 from trustrachel/master",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-12-23T13:33:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60f5dfea0e3a9e0299d4d9120d9fef515fa739a3",
"body": null,
"is_bot": false,
"headline": "Fixing test server so it works with Python 3",
"author_name": "Rachel Sanders",
"author_login": null,
"committed_at": "2014-12-16T23:53:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e644e6cc5631962cbe2c8b291ae221c0cb5b87c9",
"body": "TIL that 'NTLM %s' % b'really long bytestring' == \"NTLM b'really long bytestring'\". I mean, it makes sense once I look at it.\n\nIRL tested against a real Exchange server and verified I can authenticate and hit the API for results.",
"is_bot": false,
"headline": "Fixing encoding problems for Python 3",
"author_name": "Rachel Sanders",
"author_login": null,
"committed_at": "2014-12-16T19:52:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19c21c617191d8e59debdc13332287ab4899aa15",
"body": null,
"is_bot": false,
"headline": "Fixing reference to new Python-3 compatible version",
"author_name": "Rachel Sanders",
"author_login": null,
"committed_at": "2014-12-16T01:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "483ab84922bfe89a10cd4931ec1b865f7332d24b",
"body": null,
"is_bot": false,
"headline": "bump version. fix versioning",
"author_name": "Mastahyeti",
"author_login": "mastahyeti",
"committed_at": "2014-08-25T15:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ccbf2c1f65b550f3dec9b72f1c77e32c61b8238e",
"body": "Allow empty domain",
"is_bot": false,
"headline": "Merge pull request #47 from ecederstrand/patch-3",
"author_name": "Ben Toews",
"author_login": "mastahyeti",
"committed_at": "2014-08-25T15:20:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2e07a402bc4a0cf51b6ff4eb35826491c081d5f",
"body": "I've encountered an NTLM-authenticated Exchange server in the wild that allows usernames without the domain name. This works at least in Chrome and curl using NTLM auth. This patch works for me and is the least intrusive I could think of. It also keeps the foot-shooting countermeasures intact, and I'm fine with providing the username to requests-ntlm as \"\\\\foo_user\" and not just \"foo_user\".",
"is_bot": false,
"headline": "Allow empty domain",
"author_name": "Erik Cederstrand",
"author_login": "ecederstrand",
"committed_at": "2014-08-25T10:27:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6d8241dec3d456ba60ef06976eb9dd46da47291",
"body": "PreparedRequests have a body attribute, not data",
"is_bot": false,
"headline": "Merge pull request #46 from sigmavirus24/body-not-data",
"author_name": "Ben Toews",
"author_login": "mastahyeti",
"committed_at": "2014-08-04T14:20:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cee857e3097a820141668b2c8e8cf1c93ca32c16",
"body": null,
"is_bot": false,
"headline": "PreparedRequests have a body attribute, not data",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-08-03T13:17:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4d6804053169e9cdeabf4870b4ae35137f42e85",
"body": "Fix #43",
"is_bot": false,
"headline": "Merge pull request #44 from sigmavirus24/fix-43",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-07-23T18:42:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f820b0917f1164a70fe7e97c41853f45f975883e",
"body": null,
"is_bot": false,
"headline": "Update where we seek to",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-07-23T18:41:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85fa0c320857690fb020ed437697a01e34332f10",
"body": null,
"is_bot": false,
"headline": "Only seek back the content-length",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-07-23T18:41:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17f95aa4553edefffcc42c173492e6cb2e519283",
"body": "Reset the position of file-like object",
"is_bot": false,
"headline": "Fix #43",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-07-23T18:41:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cec61557968515d20c9ba9dc85c060de205badfa",
"body": "Style",
"is_bot": false,
"headline": "Merge pull request #45 from sigmavirus24/style",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-07-23T15:58:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ba5c67546e9d25c3609fcfaf3649db812d78b48",
"body": null,
"is_bot": false,
"headline": "Remove extra new-line",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-07-21T23:23:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "921b7551b98e8b26667a55aab8cd13327fed21cc",
"body": null,
"is_bot": false,
"headline": "Use a raw string given that we expect a two-\\ formatted string",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-07-21T02:13:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3939b8d5a806bb159923078375e752aa5d1b34e6",
"body": null,
"is_bot": false,
"headline": "__all__ should be a tuple of strings",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-07-19T01:46:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2b26185d483df5ac4d020446b918638959896ca",
"body": null,
"is_bot": false,
"headline": "Last bit of pep8 & pep257 changes",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-07-19T01:46:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db2c738307ca98a4f44bd5f2f42beeb1a52b10fa",
"body": null,
"is_bot": false,
"headline": "More pep8/pep257 formatting",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-07-19T01:18:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76f699b91aacfce180268be32fe0689ae7b4bd47",
"body": null,
"is_bot": false,
"headline": "Fix up doc-strings and line-lengths",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2014-07-19T01:06:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1af068b1c1216e4e5be7c0607cdaf1c41c512cd0",
"body": "Support the use of a Session for connection re-use.",
"is_bot": false,
"headline": "Merge pull request #42 from rbcarson/master",
"author_name": "Ben Toews",
"author_login": "mastahyeti",
"committed_at": "2014-06-30T21:24:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6be2eb9ad6b39cf331d1355b4253e092b2a5165",
"body": null,
"is_bot": false,
"headline": "Start a list of contributors.",
"author_name": "Carson Lam",
"author_login": "carsonyl",
"committed_at": "2014-06-27T18:18:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "093bb635fbaf4046e58f1a464367c95733a599d3",
"body": null,
"is_bot": false,
"headline": "Support the use of a Session for connection re-use.",
"author_name": "Carson Lam",
"author_login": "carsonyl",
"committed_at": "2014-06-26T20:55:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b43736a52993abecf92baffb16b0d513ceaee1e",
"body": null,
"is_bot": false,
"headline": "bump version",
"author_name": "Mastahyeti",
"author_login": "mastahyeti",
"committed_at": "2014-06-06T12:01:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e4701a094eaa591ff1e6e236bd875a912906d93",
"body": "Fix for compatibility with requests-2.3.0",
"is_bot": false,
"headline": "Merge pull request #39 from rekcahpassyla/requests-2.3.0_fix",
"author_name": "Ben Toews",
"author_login": "mastahyeti",
"committed_at": "2014-06-06T11:50:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "716589a4ea84434ae4c2fba31293e4a20d63e056",
"body": null,
"is_bot": false,
"headline": "Add whitespace for readability",
"author_name": "PC",
"author_login": "rekcahpassyla",
"committed_at": "2014-06-06T11:49:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d07e7fd9b255caaba4ebf280a14129690ee82c9e",
"body": "Fixes #38",
"is_bot": false,
"headline": "Fix for compatibility with requests-2.3.0",
"author_name": "PC",
"author_login": "rekcahpassyla",
"committed_at": "2014-06-06T11:49:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e918e65ccc7282ae53dc58e8d6110e8aef27d11f",
"body": "In Python3, filter() is an iterator.",
"is_bot": false,
"headline": "Merge pull request #35 from ecederstrand/patch-2",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2014-04-08T10:11:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5d7df31c25fa1b3c2a6571001e73f5e4ed5edcd",
"body": null,
"is_bot": false,
"headline": "In Python3, filter() is an iterator.",
"author_name": "Erik Cederstrand",
"author_login": "ecederstrand",
"committed_at": "2014-04-08T10:06:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95846b76787e76f7c828d0fa1b112e2aa5573426",
"body": "Support MS Exchange 2013 NTLM challenge",
"is_bot": false,
"headline": "Merge pull request #33 from ecederstrand/patch-2",
"author_name": "Ben Toews",
"author_login": "mastahyeti",
"committed_at": "2014-03-18T17:31:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "638350329f243dfc0864c9ae2064f5089d953188",
"body": "http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html section 14.47 only mentions comma-separation, not comma+space separation. So split only by comma, but clean up any spaces afterwards.",
"is_bot": false,
"headline": "Strip spaces around multiple cookie values",
"author_name": "Erik Cederstrand",
"author_login": "ecederstrand",
"committed_at": "2014-03-18T09:00:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abe66a7f1c49f34667470fa12e883745ae7181ef",
"body": null,
"is_bot": false,
"headline": "Pick only the NTLM challenge from the auth cookie",
"author_name": "Erik Cederstrand",
"author_login": "ecederstrand",
"committed_at": "2014-03-18T08:25:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c944575dd540dea4de746438f492cbdea2f22a9f",
"body": "I have an MS Exchange 2013 server that likes to send this auth header as a challenge:\r\n\r\n'www-authenticate': 'NTLM YadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaYadaY\n[…]\ndaYadaYada, Negotiate'\r\n\r\nI'm not sure why MS chose to break the protocol, but anyway python-ntlm chokes on the superfluous \"Negotiate\" at the end, and removing it lets me communicate with the server.",
"is_bot": false,
"headline": "Support MS Exchange 2013 NTLM challenge",
"author_name": "Erik Cederstrand",
"author_login": "ecederstrand",
"committed_at": "2014-03-17T20:43:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "347950d97dfd09aa0b8f27cf2f263b8229de0215",
"body": "Changed relative import for python 3 compatibility.",
"is_bot": false,
"headline": "Merge pull request #31 from keith-gray-powereng/patch-1",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2013-11-17T14:44:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14c641d2ee5582a17d5d2ecfc2433868bc658628",
"body": "I found that I could not use this package with python 3 due the following import error.\r\n\r\nImportError: cannot import name HttpNtlmAuth\r\n\r\nThis change allows it to be imported. I have not confirmed complete success with python 3 yet, this was the first step.",
"is_bot": false,
"headline": "Changed relative import for python 3 compatibility.",
"author_name": "Keith Gray",
"author_login": "keith-gray-wsp",
"committed_at": "2013-11-17T06:08:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07c2d54673b7b7e294d42553620b9fcfc396fdc3",
"body": "Typo in README.rst fixes #29",
"is_bot": false,
"headline": "Merge pull request #30 from glisha/patch-1",
"author_name": "Cory Benfield",
"author_login": "Lukasa",
"committed_at": "2013-10-24T12:35:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83b01a354bb3d73c2d217dad8ae0979e1e8c5d88",
"body": null,
"is_bot": false,
"headline": "Typo in README.rst fixes #29",
"author_name": "Georgi Stanojevski",
"author_login": "glisha",
"committed_at": "2013-10-24T10:18:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a095b79a99641046f771e4f50b3b59a340926152",
"body": "Better error message if user omits domain from username",
"is_bot": false,
"headline": "Merge pull request #26 from matt-hickford/master",
"author_name": "Ben Toews",
"author_login": "mastahyeti",
"committed_at": "2013-09-23T15:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa5206d968e84934851fe80872f330cb45bc5969",
"body": null,
"is_bot": false,
"headline": "Better error message if user omits domain from username",
"author_name": "Matt Hickford",
"author_login": "hickford",
"committed_at": "2013-09-23T10:09:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd45d43074b572bce22c8bb616f9f806414b79dc",
"body": "Closes #23",
"is_bot": false,
"headline": "Update README",
"author_name": "Ian Cordasco",
"author_login": "sigmavirus24",
"committed_at": "2013-09-07T20:23:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f77aecd7287043c1e0933176436d6e282354e2e",
"body": "Don't request the connection to be closed.",
"is_bot": false,
"headline": "Merge pull request #22 from ecederstrand/patch-1",
"author_name": "Ben Toews",
"author_login": "mastahyeti",
"committed_at": "2013-09-03T16:03:03Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 5,
"commits_last_year": 0,
"latest_release_at": "2024-06-09T23:50:47Z",
"latest_release_tag": "v1.3.0",
"releases_from_tags": false,
"days_since_last_push": 137,
"active_weeks_last_year": 0,
"days_since_latest_release": 778,
"mean_days_between_releases": 864.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "requests_ntlm",
"exists": true,
"license": "ISC",
"keywords": [
"Development Status :: 4 - Beta",
"Intended Audience :: Developers",
"License :: OSI Approved :: ISC License (ISCL)",
"Programming Language :: Python",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.8",
"Programming Language :: Python :: 3.9"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/requests_ntlm/",
"is_deprecated": false,
"latest_version": "1.3.0",
"repository_url": "https://github.com/requests/requests-ntlm",
"versions_count": 14,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2013-01-07T16:47:18.040088Z",
"latest_published_at": "2024-06-09T23:52:04.854703Z",
"latest_version_yanked": null,
"days_since_latest_publish": 778
}
]
},
"popularity": {
"forks": 98,
"stars": 347,
"watchers": 15,
"fork_history": {
"days": [
{
"date": "2012-12-18",
"count": 1
},
{
"date": "2013-03-15",
"count": 1
},
{
"date": "2013-05-31",
"count": 1
},
{
"date": "2013-06-11",
"count": 1
},
{
"date": "2013-09-12",
"count": 1
},
{
"date": "2013-09-23",
"count": 1
},
{
"date": "2013-11-17",
"count": 1
},
{
"date": "2013-11-26",
"count": 1
},
{
"date": "2014-02-19",
"count": 1
},
{
"date": "2014-04-03",
"count": 1
},
{
"date": "2014-06-06",
"count": 1
},
{
"date": "2014-06-26",
"count": 1
},
{
"date": "2014-07-11",
"count": 1
},
{
"date": "2014-07-18",
"count": 1
},
{
"date": "2014-08-18",
"count": 1
},
{
"date": "2014-11-13",
"count": 1
},
{
"date": "2015-01-12",
"count": 1
},
{
"date": "2015-02-26",
"count": 1
},
{
"date": "2015-06-02",
"count": 1
},
{
"date": "2015-08-14",
"count": 1
},
{
"date": "2015-09-10",
"count": 2
},
{
"date": "2015-09-12",
"count": 1
},
{
"date": "2015-09-23",
"count": 1
},
{
"date": "2015-11-24",
"count": 1
},
{
"date": "2016-01-30",
"count": 1
},
{
"date": "2016-02-18",
"count": 1
},
{
"date": "2016-03-03",
"count": 1
},
{
"date": "2016-03-30",
"count": 1
},
{
"date": "2016-06-19",
"count": 1
},
{
"date": "2016-08-29",
"count": 1
},
{
"date": "2016-09-02",
"count": 1
},
{
"date": "2016-09-07",
"count": 1
},
{
"date": "2016-10-31",
"count": 1
},
{
"date": "2016-11-27",
"count": 1
},
{
"date": "2016-12-13",
"count": 1
},
{
"date": "2017-02-26",
"count": 1
},
{
"date": "2017-02-27",
"count": 1
},
{
"date": "2017-05-22",
"count": 1
},
{
"date": "2017-09-04",
"count": 1
},
{
"date": "2017-09-19",
"count": 1
},
{
"date": "2017-10-02",
"count": 1
},
{
"date": "2017-10-14",
"count": 1
},
{
"date": "2017-10-19",
"count": 1
},
{
"date": "2017-11-11",
"count": 1
},
{
"date": "2018-01-18",
"count": 1
},
{
"date": "2018-02-05",
"count": 1
},
{
"date": "2018-02-06",
"count": 1
},
{
"date": "2018-04-25",
"count": 1
},
{
"date": "2018-05-28",
"count": 1
},
{
"date": "2018-06-28",
"count": 1
},
{
"date": "2018-07-25",
"count": 1
},
{
"date": "2018-08-24",
"count": 1
},
{
"date": "2018-09-10",
"count": 1
},
{
"date": "2018-11-27",
"count": 1
},
{
"date": "2019-02-26",
"count": 1
},
{
"date": "2019-03-28",
"count": 1
},
{
"date": "2019-05-21",
"count": 1
},
{
"date": "2019-06-11",
"count": 1
},
{
"date": "2019-07-16",
"count": 1
},
{
"date": "2019-09-22",
"count": 1
},
{
"date": "2019-10-12",
"count": 1
},
{
"date": "2019-10-14",
"count": 1
},
{
"date": "2019-12-15",
"count": 1
},
{
"date": "2020-02-15",
"count": 1
},
{
"date": "2020-04-03",
"count": 1
},
{
"date": "2020-10-02",
"count": 1
},
{
"date": "2020-12-12",
"count": 1
},
{
"date": "2020-12-23",
"count": 1
},
{
"date": "2021-01-08",
"count": 1
},
{
"date": "2021-02-08",
"count": 1
},
{
"date": "2021-05-25",
"count": 1
},
{
"date": "2021-07-12",
"count": 1
},
{
"date": "2021-07-13",
"count": 1
},
{
"date": "2021-07-29",
"count": 1
},
{
"date": "2021-08-04",
"count": 1
},
{
"date": "2022-05-13",
"count": 1
},
{
"date": "2023-02-22",
"count": 1
},
{
"date": "2023-02-23",
"count": 1
},
{
"date": "2023-03-03",
"count": 1
},
{
"date": "2024-08-28",
"count": 1
}
],
"complete": true,
"collected": 81,
"total_forks": 98
},
"star_history": null,
"open_issues_and_prs": 25
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"requests_ntlm/py.typed"
],
"toolchain_manifests": [],
"largest_source_bytes": 17424,
"source_files_sampled": 10,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml",
"requirements.txt",
"setup.cfg",
"setup.py"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 9,
"malicious_count": 0,
"assessed_package": "pypi:requests_ntlm@1.3.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "cryptography",
"manifest": "setup.cfg",
"ecosystem": "pypi",
"version_constraint": ">= 1.3"
},
{
"name": "pyspnego",
"manifest": "setup.cfg",
"ecosystem": "pypi",
"version_constraint": ">= 0.4.0"
},
{
"name": "requests",
"manifest": "setup.cfg",
"ecosystem": "pypi",
"version_constraint": ">= 2.0.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "cryptography",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "pyspnego",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "black",
"direct": false,
"version": "24.4.2",
"ecosystem": "pypi"
},
{
"name": "flask",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "isort",
"direct": false,
"version": "5.13.2",
"ecosystem": "pypi"
},
{
"name": "mypy",
"direct": false,
"version": "1.10.0",
"ecosystem": "pypi"
},
{
"name": "pytest",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "pytest-cov",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "types-requests",
"direct": false,
"version": null,
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 10,
"direct_count": 3,
"indirect_count": 7
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 42,
"open_issues": 25,
"closed_ratio": 0.709,
"closed_issues": 61,
"closed_unmerged_prs": 18
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "Lukasa",
"commits": 26,
"avatar_url": "https://avatars.githubusercontent.com/u/1382556?v=4"
},
{
"type": "User",
"login": "sigmavirus24",
"commits": 21,
"avatar_url": "https://avatars.githubusercontent.com/u/240830?v=4"
},
{
"type": "User",
"login": "btoews",
"commits": 18,
"avatar_url": "https://avatars.githubusercontent.com/u/1144197?v=4"
},
{
"type": "User",
"login": "mastahyeti",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/68609591?v=4"
},
{
"type": "User",
"login": "jborean93",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/8462645?v=4"
},
{
"type": "User",
"login": "ecederstrand",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/559151?v=4"
},
{
"type": "User",
"login": "nitzmahone",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/6775756?v=4"
},
{
"type": "User",
"login": "carsonyl",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/46059?v=4"
},
{
"type": "User",
"login": "rekcahpassyla",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/7807926?v=4"
},
{
"type": "User",
"login": "oliparcol",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/194605?v=4"
}
],
"contributors_sampled": 23,
"top_contributor_share": 0.21
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 13 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 6,
"reason": "Found 9/15 approved changesets -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 17 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 8,
"reason": "2 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "717339ff800830e60fbd62294cb3033ee9a04a66",
"ran_at": "2026-07-28T14:48:02Z",
"aggregate_score": 3.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-03-12T20:35:22Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2024-06-07T00:07:18Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 34,
"created_at": "2014-04-04T23:46:35Z",
"last_comment_at": "2014-04-08T17:14:07Z",
"last_comment_author": "ibigpapa"
},
{
"number": 36,
"created_at": "2014-05-18T14:39:35Z",
"last_comment_at": "2024-02-12T14:27:26Z",
"last_comment_author": "sn0wer"
},
{
"number": 61,
"created_at": "2015-08-14T14:38:31Z",
"last_comment_at": "2015-08-15T16:26:33Z",
"last_comment_author": "trezorg"
},
{
"number": 65,
"created_at": "2015-11-15T17:21:21Z",
"last_comment_at": "2024-12-03T04:43:19Z",
"last_comment_author": "simonlee-hello"
},
{
"number": 69,
"created_at": "2016-05-24T12:17:48Z",
"last_comment_at": "2016-07-26T19:14:26Z",
"last_comment_author": "carsonyl"
},
{
"number": 88,
"created_at": "2016-12-16T15:15:21Z",
"last_comment_at": "2018-07-03T15:00:27Z",
"last_comment_author": "kamikaze"
},
{
"number": 103,
"created_at": "2018-01-04T13:34:56Z",
"last_comment_at": "2018-01-07T22:22:52Z",
"last_comment_author": "jborean93"
},
{
"number": 104,
"created_at": "2018-01-15T17:45:09Z",
"last_comment_at": "2022-08-09T09:09:20Z",
"last_comment_author": "chahilp"
},
{
"number": 105,
"created_at": "2018-02-07T23:35:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 108,
"created_at": "2018-03-26T12:30:17Z",
"last_comment_at": "2018-03-27T09:34:06Z",
"last_comment_author": "achapkowski"
},
{
"number": 110,
"created_at": "2018-11-13T14:50:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 111,
"created_at": "2018-11-22T13:59:33Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 113,
"created_at": "2018-12-04T21:14:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 115,
"created_at": "2019-05-22T21:56:36Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 118,
"created_at": "2019-08-07T13:00:40Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 119,
"created_at": "2019-09-25T09:42:26Z",
"last_comment_at": "2019-09-25T10:25:44Z",
"last_comment_author": "zuizuihao"
},
{
"number": 121,
"created_at": "2020-02-19T17:09:49Z",
"last_comment_at": "2020-03-11T23:32:34Z",
"last_comment_author": "Sl1ckR1ck"
},
{
"number": 122,
"created_at": "2020-08-04T11:22:54Z",
"last_comment_at": "2020-08-04T15:18:38Z",
"last_comment_author": "dbergamin"
},
{
"number": 123,
"created_at": "2020-08-17T22:16:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 128,
"created_at": "2022-12-20T21:16:28Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/requests/requests-ntlm",
"host": "github.com",
"name": "requests-ntlm",
"owner": "requests"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "Abandonment Policy applies a 85% multiplier to weighted overall health.",
"notes": [
{
"code": "abandonment_overall_adjustment",
"params": {
"cap": 0,
"pct": 85
}
}
],
"value": 42,
"inputs": {
"security": 46,
"vitality": 19,
"community": 55,
"governance": 70,
"engineering": 59,
"abandonment_cap": null,
"abandonment_state": "at_risk",
"abandonment_multiplier": 85,
"weighted_overall_before_abandonment": 50,
"overall_after_abandonment_multiplier": 42
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "critical",
"name": "Vitality",
"value": 19,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"commits_last_year": 0,
"human_commit_share": 1,
"days_since_last_push": 137,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 137 days ago",
"points": 9.9,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 137
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"releases_count": 5,
"latest_release_tag": "v1.3.0",
"releases_from_tags": false,
"days_since_latest_release": 778,
"mean_days_between_releases": 864.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "5 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 5
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 778 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 778
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~864.1 days",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 864.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"cap": null,
"state": "at_risk",
"guards": [
"dependencies_clean"
],
"signals": [
"issue_rot",
"scorecard_unmaintained"
],
"red_flag": true,
"multiplier_pct": 85,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 18,
"days_since_last_merged_pr": 781,
"days_since_last_human_commit": 781,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 781 days; 2 unmet obligation(s): issues unanswered, Scorecard reports it unmaintained",
"points": 85,
"status": "partial",
"details": [
{
"code": "abandonment_flagged",
"params": {
"days": 781,
"count": 2,
"signals": "issues unanswered, Scorecard reports it unmaintained"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 55,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"forks": 98,
"stars": 347,
"watchers": 15,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "347 stars",
"points": 41.2,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 347
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "98 forks",
"points": 16.6,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 98
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "15 watchers",
"points": 6.4,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 15
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 70,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 23,
"top_contributor_share": 0.21
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 21% of commits",
"points": 17.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 21
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "23 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 23
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 17 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"merged_prs": 42,
"open_issues": 25,
"closed_issues": 61,
"issue_closed_ratio": 0.709,
"closed_unmerged_prs": 18
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "71% of issues closed",
"points": 33.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 71
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "42/60 decided PRs merged",
"points": 26.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 42,
"decided": 60
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 9/15 approved changesets -- score normalized to 6",
"points": 9,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"followers": 84,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "requests",
"public_repos": 17,
"account_age_days": 5003
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "84 followers of requests",
"points": 13.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 84,
"login": "requests"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "17 public repos, account ~13 yr old",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 17
}
},
{
"code": "account_age_years",
"params": {
"years": 13
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "moderate",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"packages": [
"requests_ntlm"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 778
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 778 days ago",
"points": 4,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 778
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "14 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 14
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 59,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 13 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 46,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 33,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 13 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 9/15 approved changesets -- score normalized to 6",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 17 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "2 existing vulnerabilities detected",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:requests_ntlm@1.3.0 runtime dependency closure — what installing the published package pulls in — 9 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:requests_ntlm@1.3.0",
"assessed": 9
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 9,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 9,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 13
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 39,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.47,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "47 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 25.1,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 47,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"requests_ntlm/py.typed"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "requests_ntlm/py.typed",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "requests_ntlm/py.typed"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 17424,
"source_files_sampled": 10,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (requests_ntlm/py.typed)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "requests_ntlm/py.typed",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/10 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 10,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-28T14:48:28.309265Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/requests/requests-ntlm.svg",
"full_name": "requests/requests-ntlm",
"license_state": "custom",
"license_spdx": null
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with requests/requests-ntlm. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
