Public record
Software health reportschema 0.27.0 · metrics 2.5.0 · 2026-07-31 00:30 UTC

sebastienrousseau / bankstatementparser

Parse bank statements — CAMT/ISO 20022, PAIN.001, CSV (EN/DE/FR/ES), OFX/QFX, MT940, PDFs (digital + scanned) — into unified Transactions. Deterministic parsers, LLM/vision fallback, Golden Rule + multi-currency + continuity verification, page provenance, dedupe, review, accuracy evals, CLI + REST API. 100% test coverage.

PythonApache-2.0★ 38 stars⑂ 8 forkssince Nov 2023View on GitHub ↗
KindLibraryNetwork serviceCommand-line toolhow this is determined
#banking#camt#finance#iso20022#pain001#bank-statements#cli#csv#mt940#ofx#parser#categorization#deduplication#litellm#llm#ollama#pdf#fintech#rest-api#treasury

sebastienrousseau/bankstatementparser holds a health index of 84 out of 100, placing it in the Excellent band. It scores highest on Engineering Quality (90/100) and lowest on Sustainability & Governance (54/100). It was last updated 1 day ago. A single contributor accounts for most of its recent work.

84
overall / 100
Excellent

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.

84
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

The weighted overall 71 is calibrated to 84 on the published index scale (record calibration 2026-08-02).

Ownership

Sebastien RousseauPersonal account
153 followers146 public repossince Jan 2012

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
PyPIbankstatementparser0.0.11-812 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

79Good · 21% of overall

Development activity

72Good
How it's scored
36/36Push recency — last push 1 days ago
7.6/36Commit cadence — 11/52 weeks with commits
18/18Commit volume — 154 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year154
human_commit_share0.8
days_since_last_push1
active_weeks_last_year11

Release discipline

90Excellent
How it's scored
27/27Ships releases — 11 releases published
36/36Release recency — latest release 12 days ago
27/27Release cadence — a release every ~13.1 days
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Inputs used
releases_count11
latest_release_tagv0.0.11
releases_from_tagsno
days_since_latest_release12
mean_days_between_releases13.1

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

58Moderate · 17% of overall

Popularity & adoption

34At Risk
How it's scored
25.4/60Stars — 38 stars
7/25Forks — 8 forks
1.7/15Watchers — 3 watchers
Inputs used
forks8
stars38
watchers3
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community health

85Excellent
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (Apache-2.0)
18/18CONTRIBUTING guide
13.5/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
readme_badges—
has_contributingyes
has_issue_templateno
has_code_of_conductyes
readme_badge_services—
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

54Moderate · 23% of overall

Maintainer resilience (bus factor)

10Critical
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
0/22.5Commit distribution — top contributor authored 100% of commits
1.4/13.5Contributor breadth — 1 contributors
0/10OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Inputs used
bus_factor1
contributors_sampled1
top_contributor_share1

Issue & PR responsiveness

59Moderate
How it's scored
42/42Issue resolution — 100% of issues closed
9.1/30PR acceptance — 41/135 decided PRs merged
0/13Newcomer PR acceptance — no first-time contributor's PR decided in 30d
0/15OpenSSF Scorecard: Code-Review — Found 0/6 approved changesets -- score normalized to 0
Inputs used
merged_prs41
open_issues0
closed_issues7
prs_merged_7d—
prs_decided_7d—
prs_merged_30d—
prs_decided_30d—
issue_closed_ratio1
closed_unmerged_prs94
first_time_authors_30d—
first_time_prs_merged_30d—
first_time_prs_decided_30d—
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.

Ownership & stewardship

63Moderate
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
15.7/25Owner reach — 153 followers of sebastienrousseau
25/25Track record — 146 public repos, account ~14 yr old
Inputs used
followers153
owner_typeUser
is_verified—
owner_loginsebastienrousseau
public_repos146
account_age_days5,294
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.

Package maintenance

100Exceptional
How it's scored
25/25Published & resolvable — 1 package(s) on pypi
35/35Publish recency — latest publish 12 days ago
20/20Version history — 8 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesbankstatementparser
ecosystemspypi
any_deprecatedno
min_days_since_publish12

Engineering Quality

Are baseline engineering and documentation practices in place?

90Excellent · 19% of overall

Engineering practices

84Excellent
How it's scored
24/24CI workflows — 6 workflow(s)
24/24Tests present
16/16Linter config — .pylintrc
0/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configno

Documentation

100Exceptional
How it's scored
30/30README
25/25Documentation directory
15/15Documentation / homepage site — http://docs.bankstatementparser.com/
10/10Repository description
10/10Topics — 20 topics
10/10Wiki
Inputs used
topicsbanking, camt, finance, iso20022, pain001, bank-statements, cli, csv, mt940, ofx, parser, categorization, deduplication, litellm, llm, ollama, pdf, fintech, rest-api, treasury
has_wikiyes
homepagehttp://docs.bankstatementparser.com/
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

76Good · 16% of overall

Security posture

70Good
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
2.2/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/6 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
4/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
5/5SAST — SAST tool is run on all commits
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
6.8/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated18
scorecard_versionv5.5.0
checks_inconclusive0
scorecard_aggregate7

Dependency advisories

100Exceptional
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40No advisories left outstanding — no advisory carries a publication date
Inputs used
sourceosv
advisories0
affected_packages0
assessed_packages13
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:bankstatementparser@0.0.11 runtime dependency closure — what installing the published package pulls in — 13 packages. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.

61Moderate · 4% of overall

Agent context & guidance

40Weak
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 80 of 80 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share1
agent_instruction_files—
agent_instruction_max_bytes—

Verify loop (build / test / typecheck)

87Excellent
How it's scored
18/18One-command bootstrap — Makefile, mise.toml
22/22Automated tests
11/11Lint / format config — .pylintrc
0/11Static type checking
10/10Reproducible environment — lockfile
10/10Demonstrated agent practice — 8 of the last 100 commits agent-authored or agent-credited
8/8Automated maintenance — 20 of the last 100 commits are automated dependency updates
8/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
Inputs used
has_nixno
has_testsyes
lockfilespoetry.lock
has_dockerfileno
typed_languageno
bootstrap_filesMakefile, mise.toml
has_devcontainerno
has_linter_configyes
typecheck_configs—
agent_commit_share0.08
toolchain_manifests—
dependency_bot_commit_share0.2

Code legibility for models

55Moderate
How it's scored
0/45Type-checkable code — Python without a type-check config
55/55Manageable file sizes — 0/107 source files over 60KB
Inputs used
primary_languagePython
largest_source_bytes52,634
source_files_sampled107
oversized_source_files0

Machine-readable interfaces

40Weak
How it's scored
0/40API schema (OpenAPI/GraphQL/proto)
0/20MCP server
40/40Runnable examples — examples
Inputs used
example_dirsexamples
has_mcp_signalno
api_schema_files—

Key facts

38GitHub stars
1contributors
154commits, last 12 months
1days since last push
11releases
1bus factor
0open issues
PyPIpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

More detail

Star and fork history 0 ★ / 8 ⇿
0Stars
8Forks
10Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

02468812024-102025-092026-07
Major 0Minor 0Patch 10

Each point covers 2 days.

OpenSSF Scorecard 7.0 / 10
7.0aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-31 00:30 UTC

10Binary-Artifactsno binaries found in the repo
3Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests25 out of 25 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/6 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
8Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 8
10SASTSAST tool is run on all commits
10Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
9Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Direct dependencies 16
RegistryPackageVersion constraintManifest
PyPIlxml>=5.0pyproject.toml
PyPIopenpyxl^3.1.5pyproject.toml
PyPIpandas^2.3.3pyproject.toml
PyPIdefusedxml^0.7.1pyproject.toml
PyPIpydantic^2.11.0pyproject.toml
PyPIpolars^1.32.0pyproject.toml
PyPIlitellm>=1.83.10pyproject.toml
PyPIpypdf>=4.0.0pyproject.toml
PyPIpdfplumber>=0.11.0pyproject.toml
PyPIpypdfium2>=4.30.0pyproject.toml
PyPIfastapi>=0.115.0pyproject.toml
PyPIuvicorn>=0.34.0pyproject.toml
PyPIlxml>=4.9.3setup.cfg
PyPIopenpyxl>=3.1.2setup.cfg
PyPIpandas>=2.1.1setup.cfg
PyPIdefusedxml>=0.7.1setup.cfg
All dependencies 121

Full resolved dependency set from the GitHub dependency graph: 12 direct and 109 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
PyPIdefusedxml0.7.1direct
PyPIfastapi0.139.2direct
PyPIlitellm1.93.0direct
PyPIlxml6.1.1direct
PyPIopenpyxl3.1.5direct
PyPIpandas2.3.3direct
PyPIpdfplumber0.11.10direct
PyPIpolars1.43.0direct
PyPIpydantic2.13.4direct
PyPIpypdf6.14.2direct
PyPIpypdfium25.12.1direct
PyPIuvicorn0.51.0direct
PyPIaiohappyeyeballs2.6.2indirect
PyPIaiohttp3.14.1indirect
PyPIaiosignal1.4.0indirect
PyPIannotated-doc0.0.4indirect
PyPIannotated-types0.7.0indirect
PyPIanyio4.13.0indirect
PyPIast-serialize0.6.0indirect
PyPIasync-timeout5.0.1indirect
PyPIattrs26.1.0indirect
PyPIbabel2.18.0indirect
PyPIbackrefs7.0indirect
PyPIbandit1.9.4indirect
PyPIcertifi2026.5.20indirect
PyPIcffi2.0.0indirect
PyPIcharset-normalizer3.4.7indirect
PyPIclick8.4.2indirect
PyPIcolorama0.4.6indirect
PyPIcoverage7.15.2indirect
PyPIcryptography48.0.1indirect
PyPIdistro1.9.0indirect
PyPIet-xmlfile2.0.0indirect
PyPIexceptiongroup1.3.1indirect
PyPIfastuuid0.14.0indirect
PyPIfilelock3.29.3indirect
PyPIfrozenlist1.8.0indirect
PyPIfsspec2026.4.0indirect
PyPIghp-import2.1.0indirect
PyPIgriffelib2.0.2indirect
PyPIh110.16.0indirect
PyPIhf-xet1.5.1indirect
PyPIhttpcore1.0.9indirect
PyPIhttpx0.28.1indirect
PyPIhuggingface-hub1.18.0indirect
PyPIhypothesis6.156.7indirect
PyPIhypothesis6.158.1indirect
PyPIidna3.18indirect
PyPIimportlib-metadata8.9.0indirect
PyPIiniconfig2.3.0indirect
PyPIinterrogate1.7.0indirect
PyPIjinja23.1.6indirect
PyPIjiter0.15.0indirect
PyPIjsonschema4.26.0indirect
PyPIjsonschema-specifications2025.9.1indirect
PyPIlibrt0.13.0indirect
PyPImarkdown3.10.2indirect
PyPImarkdown-it-py4.2.0indirect
PyPImarkupsafe3.0.3indirect
PyPImdurl0.1.2indirect
PyPImergedeep1.3.4indirect
PyPImkdocs1.6.1indirect
PyPImkdocs-autorefs1.4.4indirect
PyPImkdocs-get-deps0.2.2indirect
PyPImkdocs-material9.7.7indirect
PyPImkdocs-material-extensions1.3.1indirect
PyPImkdocstrings1.0.6indirect
PyPImkdocstrings-python2.0.4indirect
PyPImultidict6.7.1indirect
PyPImypy2.3.0indirect
PyPImypy-extensions1.1.0indirect
PyPInumpy2.2.6indirect
PyPIopenai2.41.1indirect
PyPIpackaging26.2indirect
PyPIpaginate0.5.7indirect
PyPIpathspec1.1.1indirect
PyPIpdfminer-six20260107indirect
PyPIpillow12.3.0indirect
PyPIplatformdirs4.10.0indirect
PyPIpluggy1.6.0indirect
PyPIpolars-runtime-321.43.0indirect
PyPIpropcache0.5.2indirect
PyPIpy1.11.0indirect
PyPIpy-cpuinfo9.0.0indirect
PyPIpycparser3.0indirect
PyPIpydantic-core2.46.4indirect
PyPIpygments2.20.0indirect
PyPIpymdown-extensions11.0indirect
PyPIpytest9.1.1indirect
PyPIpytest-benchmark5.2.3indirect
PyPIpytest-cov7.1.0indirect
PyPIpython-dateutil2.9.0.post0indirect
PyPIpython-dotenv1.2.2indirect
PyPIpytz2026.2indirect
PyPIpyyaml6.0.3indirect
PyPIpyyaml-env-tag1.1indirect
PyPIreferencing0.37.0indirect
PyPIregex2026.5.9indirect
PyPIrequests2.34.2indirect
PyPIrich15.0.0indirect
PyPIrpds-py0.30.0indirect
PyPIruff0.15.22indirect
PyPIshellingham1.5.4indirect
PyPIsix1.17.0indirect
PyPIsniffio1.3.1indirect
PyPIsortedcontainers2.4.0indirect
PyPIstarlette1.3.1indirect
PyPIstevedore5.8.0indirect
PyPItabulate0.10.0indirect
PyPItiktoken0.13.0indirect
PyPItokenizers0.23.1indirect
PyPItomli2.4.1indirect
PyPItqdm4.68.2indirect
PyPItyper0.25.1indirect
PyPItyping-extensions4.16.0indirect
PyPItyping-inspection0.4.2indirect
PyPItzdata2026.3indirect
PyPIurllib32.7.0indirect
PyPIwatchdog6.0.0indirect
PyPIyarl1.24.2indirect
PyPIzipp4.1.0indirect
Dependency advisories 0

Installing pypi:bankstatementparser@0.0.11 pulls in 13 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.

No known advisories affect the assessed dependencies.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "banking",
        "camt",
        "finance",
        "iso20022",
        "pain001",
        "bank-statements",
        "cli",
        "csv",
        "mt940",
        "ofx",
        "parser",
        "categorization",
        "deduplication",
        "litellm",
        "llm",
        "ollama",
        "pdf",
        "fintech",
        "rest-api",
        "treasury"
      ],
      "is_fork": false,
      "size_kb": 2159,
      "has_wiki": true,
      "homepage": "http://docs.bankstatementparser.com/",
      "languages": {
        "Shell": 1577,
        "Python": 997410,
        "Makefile": 3024
      },
      "pushed_at": "2026-07-29T02:36:26Z",
      "created_at": "2023-11-08T09:38:15Z",
      "owner_type": "User",
      "updated_at": "2026-07-29T11:42:10Z",
      "description": "Parse bank statements — CAMT/ISO 20022, PAIN.001, CSV (EN/DE/FR/ES), OFX/QFX, MT940, PDFs (digital + scanned) — into unified Transactions. Deterministic parsers, LLM/vision fallback, Golden Rule + multi-currency + continuity verification, page provenance, dedupe, review, accuracy evals, CLI + REST API. 100% test coverage.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Python",
      "significant_languages": [
        "Python"
      ]
    },
    "owner": {
      "blog": "https://sebastienrousseau.com",
      "name": "Sebastien Rousseau",
      "type": "User",
      "login": "sebastienrousseau",
      "company": null,
      "location": "London, UK",
      "followers": 153,
      "avatar_url": "https://avatars.githubusercontent.com/u/1394998?v=4",
      "created_at": "2012-01-31T16:10:59Z",
      "is_verified": null,
      "public_repos": 146,
      "account_age_days": 5294
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.0.11",
          "kind": "patch",
          "published_at": "2026-07-18T14:53:08Z"
        },
        {
          "tag": "v0.0.10",
          "kind": "patch",
          "published_at": "2026-06-25T15:42:33Z"
        },
        {
          "tag": "v0.0.9",
          "kind": "patch",
          "published_at": "2026-06-11T23:07:25Z"
        },
        {
          "tag": "v0.0.8",
          "kind": "patch",
          "published_at": "2026-04-11T17:43:49Z"
        },
        {
          "tag": "v0.0.7",
          "kind": "patch",
          "published_at": "2026-04-11T14:01:16Z"
        },
        {
          "tag": "v0.0.6",
          "kind": "patch",
          "published_at": "2026-04-10T23:15:06Z"
        },
        {
          "tag": "v0.0.5",
          "kind": "patch",
          "published_at": "2026-04-08T13:35:02Z"
        },
        {
          "tag": "v0.0.4",
          "kind": "patch",
          "published_at": "2026-04-01T07:40:10Z"
        },
        {
          "tag": "v0.0.3",
          "kind": "patch",
          "published_at": "2026-03-23T00:47:28Z"
        },
        {
          "tag": "v0.0.2",
          "kind": "patch",
          "published_at": "2026-03-22T21:14:57Z"
        },
        {
          "tag": "v0.0.1",
          "kind": "patch",
          "published_at": "2023-11-08T21:28:21Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "532d0255b8aca1166ee1ea2789b555cfe0c0f571",
          "body": "Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.0 to 4.37.3.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/comp\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump github/codeql-action/init from 4.37.0 to 4.37.3 (#128)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-28T19:46:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "57c2b4e358cd5127bc0a1461bc9c9a941940e2d8",
          "body": "Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action) from 4.37.0 to 4.37.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump github/codeql-action/autobuild from 4.37.0 to 4.37.2 (#130)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-28T19:46:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "063b04f966451ae4ef1dcf983bc4feb179d5b120",
          "body": "Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.0 to 4.37.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/c\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump github/codeql-action/analyze from 4.37.0 to 4.37.2 (#134)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-28T19:38:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2ffb5317968e27f7675c38a888ffd43f4a443e36",
          "body": "Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.21.3 to 11.0.\n- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)\n- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.21.3...11.0)\n\n---\nupdated-dependencies:\n- depe\n[…]\nns\n  dependency-version: '11.0'\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump pymdown-extensions from 10.21.3 to 11.0 (#142)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-25T08:52:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "27c8e8628406204294a8bc9a329157a9e7e3bb02",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb9\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/checkout from 7.0.0 to 7.0.1 (#129)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-25T08:19:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4299e9a2d2de713d4ea5ffdc39ca298bfb27b61f",
          "body": "Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.3.0 to 7.0.0.\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/setup-python from 6.3.0 to 7.0.0 (#132)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-25T08:18:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2a74c696b729a6952fefaf386339db9383e95a24",
          "body": "Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.14.0 to 1.14.1.\n- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)\n- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/cef221092ed1bacb1cc03d23a2d87d1d172e277b...ba38be9e\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#133)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-25T08:17:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "71a8bf68a27da0cf304edd4ca46fdaaed6ba3761",
          "body": "Bumps [tzdata](https://github.com/python/tzdata) from 2026.2 to 2026.3.\n- [Release notes](https://github.com/python/tzdata/releases)\n- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)\n- [Commits](https://github.com/python/tzdata/compare/2026.2...2026.3)\n\n---\nupdated-dependencies:\n- \n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump tzdata from 2026.2 to 2026.3 (#136)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-25T08:16:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "37aac0cb482dd4618c29bc62675679408a0ab483",
          "body": "Bumps [polars](https://github.com/pola-rs/polars) from 1.42.1 to 1.43.0.\n- [Release notes](https://github.com/pola-rs/polars/releases)\n- [Commits](https://github.com/pola-rs/polars/compare/py-1.42.1...py-1.43.0)\n\n---\nupdated-dependencies:\n- dependency-name: polars\n  dependency-version: 1.43.0\n  depe\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump polars from 1.42.1 to 1.43.0 (#141)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e6df988db892f9eaca64e6ff26f32cd57e5b260b",
          "body": "Bumps [click](https://github.com/pallets/click) from 8.4.1 to 8.4.2.\n- [Release notes](https://github.com/pallets/click/releases)\n- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)\n- [Commits](https://github.com/pallets/click/compare/8.4.1...8.4.2)\n\n---\nupdated-dependencies:\n- depe\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump click from 8.4.1 to 8.4.2 (#140)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "650b8b421116bfc6c37ce684b164aa226e210b89",
          "body": "Bumps [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings) from 1.0.4 to 1.0.6.\n- [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases)\n- [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/mkdocstrings/mkdocstrings\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump mkdocstrings from 1.0.4 to 1.0.6 (#139)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1785f0d044b8da717e85e9a5c18ccb219c1e8b9e",
          "body": "Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.49.0 to 0.51.0.\n- [Release notes](https://github.com/Kludex/uvicorn/releases)\n- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)\n- [Commits](https://github.com/Kludex/uvicorn/compare/0.49.0...0.51.0)\n\n---\nupdated\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump uvicorn from 0.49.0 to 0.51.0 (#138)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a6763170a7585abdb0770a80a7298a3d280d19a",
          "body": "Bumps [litellm](https://github.com/BerriAI/litellm) from 1.92.0 to 1.93.0.\n- [Release notes](https://github.com/BerriAI/litellm/releases)\n- [Commits](https://github.com/BerriAI/litellm/compare/v1.92.0...v1.93.0)\n\n---\nupdated-dependencies:\n- dependency-name: litellm\n  dependency-version: 1.93.0\n  dep\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump litellm from 1.92.0 to 1.93.0 (#137)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1812dea25870b39ac2a9693ceb3c9d6aa1182d6e",
          "body": "Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.7.6 to 9.7.7.\n- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)\n- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)\n- [Commits](https://github.com/squidfunk/mkdocs-materi\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump mkdocs-material from 9.7.6 to 9.7.7 (#135)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1c223f2bb8696b6b8f6d665dee521b253f689a8a",
          "body": "Bumps [hypothesis](https://github.com/HypothesisWorks/hypothesis) from 6.156.7 to 6.158.1.\n- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)\n- [Commits](https://github.com/HypothesisWorks/hypothesis/compare/v6.156.7...v6.158.1)\n\n---\nupdated-dependencies:\n- dependency-name: hy\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump hypothesis from 6.156.7 to 6.158.1 (#131)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "162f722a1f6d8919a1fce435ab3e6d59b0acc917",
          "body": "Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.2.0 to 12.3.0.\n- [Release notes](https://github.com/python-pillow/Pillow/releases)\n- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)\n- [Commits](https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0)\n[…]\now\n  dependency-version: 12.3.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump pillow from 12.2.0 to 12.3.0 (#127)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:46:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "22628fcd62cfc1f5d5d08e39f3da390432ab100e",
          "body": "Consolidate all 17 open Dependabot PRs into a single release.\n\nPython dependencies (poetry update + regenerated hash-pinned\nrequirements.txt): fastapi 0.139.2, litellm 1.92.0, polars 1.42.1,\npypdfium2 5.12.1, typing-extensions 4.16.0, ast-serialize 0.6.0,\ncoverage 7.15.2, hypothesis 6.156.7, mypy 2.\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "chore(deps): fold all open Dependabot updates into v0.0.11",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-07-18T14:45:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c3a315f7a1915a884c0871b31527047f4b56fc3a",
          "body": "…hing\n\nci: token-free PyPI trusted-publishing workflow",
          "is_bot": false,
          "headline": "Merge pull request #102 from sebastienrousseau/ci/pypi-trusted-publis…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T15:53:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5eaf91a55d7a2446952119f363f1f40d8a2f720c",
          "body": "Adds OIDC trusted publishing (no long-lived token) so releases can be\npublished to PyPI from CI, consistent with the companion packages.\nTriggers on workflow_dispatch (with a tag input) or when a GitHub\nrelease is published. Requires a PyPI trusted publisher configured for\nthe bankstatementparser pr\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "ci: add token-free PyPI trusted-publishing workflow",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T15:49:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a73b917703be0f80db1e2a7ebba095737a3705bc",
          "body": "chore(release): v0.0.10",
          "is_bot": false,
          "headline": "Merge pull request #101 from sebastienrousseau/release/v0.0.10",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T14:45:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61627c3173ebb6ab41c1e1e6519a46bc710b668c",
          "body": "… hardening\n\nFold the [Unreleased] changes into a dated [0.0.10] entry and bump the\nversion across pyproject, setup.cfg, the README badge, and the\n.github/SECURITY.md supported-versions table.\n\nRelease contents:\n- VerificationStatus.UNVERIFIABLE + clearer deterministic-detection\n  warning (#99)\n- Do\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "chore(release): v0.0.10 — UNVERIFIABLE status, warning rewrite, audit…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T14:41:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c51651d1be32d77854993b0ed9a9e2f0d42a268d",
          "body": "audit: genuine 100% docs + honest 100% coverage (de-pragma)",
          "is_bot": false,
          "headline": "Merge pull request #100 from sebastienrousseau/audit/full-review",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T13:58:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fdfee3248564ed32bdb057b70256b041947294d",
          "body": "…overage\n\nAdversarial audit against four criteria; all gates kept green.\n\nUnit tests (line+branch) genuinely 100%:\n- Removed 27 of 29 `# pragma: no cover` pragmas by making the guarded\n  behaviour testable and adding real tests: the `/ingest` REST endpoint\n  (400/413/200/422 branches), the API serve\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "test(audit): full-quality pass — 100% docs, pragma cleanup, example c…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T13:41:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "640a898f4799ddd88d0b0f3edf8d7c2f634168ea",
          "body": "…-and-warning\n\nfix(hybrid): add UNVERIFIABLE status + clearer deterministic-detection warning",
          "is_bot": false,
          "headline": "Merge pull request #99 from sebastienrousseau/fix/verification-status…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T10:41:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b94ba760b6338beca47347acbd17a87001cb45e3",
          "body": "Introduce VerificationStatus.UNVERIFIABLE for cases where the Golden\nRule cannot be applied (missing opening/closing balance, fewer than\ntwo statements, multi-currency balances that cannot be attributed to a\nsingle currency). Migrate every \"cannot apply the rule\" path that\npreviously reported FAILED\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "feat(hybrid): add UNVERIFIABLE status and reword detection warning",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-25T10:37:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a1c89c6c4acd8690b2bb1c62f32e17c23a4335a0",
          "body": "chore(deps): consolidated dependency updates + security fixes",
          "is_bot": false,
          "headline": "Merge pull request #98 from sebastienrousseau/chore/dependency-updates",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T22:06:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d756fd096c4adbc2312a42ada3038f1e34de8f0",
          "body": "Regenerate the lock to the latest compatible versions, covering the\nopen Dependabot PRs and resolving the open security alerts:\n\n- security: starlette 1.2.1 -> 1.3.1 (GHSA-82w8-qh3p-5jfq high,\n  GHSA-jp82-jpqv-5vv3 low) and pypdf 6.13.2 -> 6.14.2\n  (GHSA-jm82-fx9c-mx94 medium)\n- dev: mypy 1.20.2 -> \n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "chore(deps): consolidated dependency updates + security fixes",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T22:02:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "53cf4f2911da418a6b628530f1465cdef15af920",
          "body": "…ns/actions/cache-6.0.0\n\nci: bump actions/cache from 4.3.0 to 6.0.0",
          "is_bot": false,
          "headline": "Merge pull request #95 from sebastienrousseau/dependabot/github_actio…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T21:58:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc71f36b89bd13e2d356f115b2889233789ed12a",
          "body": "…ns/actions/checkout-7.0.0\n\nci: bump actions/checkout from 6.0.3 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #94 from sebastienrousseau/dependabot/github_actio…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T21:58:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02616213d9344bd4525de55e6fb8b999adf5077e",
          "body": "…ns/actions/deploy-pages-5.0.0\n\nci: bump actions/deploy-pages from 4.0.5 to 5.0.0",
          "is_bot": false,
          "headline": "Merge pull request #81 from sebastienrousseau/dependabot/github_actio…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T21:58:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "831bef880d623b8fbc44a2bf4a702c84d3e8efe4",
          "body": "…ns/actions/upload-pages-artifact-5.0.0\n\nci: bump actions/upload-pages-artifact from 3.0.1 to 5.0.0",
          "is_bot": false,
          "headline": "Merge pull request #82 from sebastienrousseau/dependabot/github_actio…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T21:58:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33dc36dbf3768d7c89887cdc70dc0e4472ce9ff2",
          "body": "docs(readme): add PyPI version badges to Ecosystem table",
          "is_bot": false,
          "headline": "Merge pull request #97 from sebastienrousseau/docs/ecosystem-pypi-badges",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T20:51:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e1b26c0bc1ab8521349c866e0767e39d7c6f320f",
          "body": "All five companion packages are now published on PyPI at v0.0.10; add a\nPyPI column with a live version badge linking to each project page.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "docs(readme): add PyPI version badges to the Ecosystem table",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T20:47:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "836c27d2421f5d97faad770af3c85cb12d1852f9",
          "body": "docs(readme): add Ecosystem section for companion packages",
          "is_bot": false,
          "headline": "Merge pull request #96 from sebastienrousseau/docs/companion-ecosystem",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T20:01:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b7f14ea80928513b6947c1c3632ec513ae104f2",
          "body": "Document the five standalone companion repositories that build on the\ncore engine: bankstatementparser-mcp (MCP server), -lsp (MT940 LSP),\n-writer-xlsx (Excel export), -loader-mt942 and -loader-bai2 (additional\ninput formats). Adds a Contents entry and a comparison table.\n\nCo-Authored-By: Claude Opu\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "docs(readme): add Ecosystem section for companion packages",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-24T19:02:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e339a96594c570623241902c95b3795c9aa82664",
          "body": "Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 6.0.0.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/0057852bfaa89a56745cba8c7296529d2fc3983\n[…]\ns:\n- dependency-name: actions/cache\n  dependency-version: 6.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/cache from 4.3.0 to 6.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-24T02:33:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "943563ee650242a62f94bf234ece24561c807239",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\n- dependency-name: actions/checkout\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/checkout from 6.0.3 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-24T02:33:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "259ed160b741045be9009759ffaa7a31a98b8889",
          "body": "Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 3.0.1 to 5.0.0.\n- [Release notes](https://github.com/actions/upload-pages-artifact/releases)\n- [Commits](https://github.com/actions/upload-pages-artifact/compare/56afc609e74202658d3ffba0e8f6dda462b719fa...fc\n[…]\nname: actions/upload-pages-artifact\n  dependency-version: 5.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/upload-pages-artifact from 3.0.1 to 5.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-17T02:33:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d110e37be3dd2566d399ade9f2389eec6dca8c3",
          "body": "Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4.0.5 to 5.0.0.\n- [Release notes](https://github.com/actions/deploy-pages/releases)\n- [Commits](https://github.com/actions/deploy-pages/compare/d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e...cd2ce8fcbc39b97be8ca5fce6e763baed58fa1\n[…]\npendency-name: actions/deploy-pages\n  dependency-version: 5.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/deploy-pages from 4.0.5 to 5.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-17T02:33:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1b54034225244f6b4a42510e3183364bf39f1b24",
          "body": "…egression suite, accuracy evals\n\nfeat(v0.0.9): audit pass, hybrid trust & correctness, regression suite, accuracy evals",
          "is_bot": false,
          "headline": "Merge PR #79: feat(v0.0.9) Audit Pass — hybrid trust & correctness, r…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T23:03:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f9388a1961d89266c6446435944c5a6c0f79ab6",
          "body": "All Unreleased entries (hybrid trust slice, regression suite,\nquick wins 5-8) ship in v0.0.9; section dated 2026-06-11.",
          "is_bot": false,
          "headline": "docs(changelog): fold Unreleased into 0.0.9 for release",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T22:57:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c4d996aed5c118fd8b126711b5f51c2c313c493",
          "body": "Plain \"bash\" on Windows runners resolves to the System32 WSL\nlauncher, which exits 1 when no distribution is installed. The\nregression tests now derive the Git Bash path from git.exe.\nAlso pin LF endings for *.sh via .gitattributes — runners check\nout with core.autocrlf=true, and CRLF breaks bash scripts.",
          "is_bot": false,
          "headline": "fix(ci): run shell-example tests under Git Bash on Windows",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T22:26:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01b71c5a75e66cb6f99a8ba7365471601bc29ae7",
          "body": "…ES headers, eval harness\n\n5. Page provenance in the text-LLM path: extract_text_pages()\n   keeps per-page text, smart_ingest attributes each row to the\n   page containing its description (Transaction.source_page;\n   vision rows inherit it from their bounding box). Surfaced in\n   the ingest CSV and \n[…]\nks on the mock self-check and\n   runs the real-model eval non-blocking, gated on the\n   BSP_EVAL_MODEL repo variable.\n\n818 tests, coverage gated at 100% line+branch; docs counts and\nCHANGELOG updated.",
          "is_bot": false,
          "headline": "feat(hybrid): quick wins 5-8 — page provenance, continuity check, FR/…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T21:45:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f84dd048e25c0066d2e794ec72fddb1e3b07408e",
          "body": "Restores pyproject.toml, setup.cfg, api.py, SECURITY.md and the\napi version test to 0.0.9. Version renumbering only happens on\nexplicit request.",
          "is_bot": false,
          "headline": "revert: keep version at 0.0.9 (0.1.0 bump was not requested)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T21:44:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28581f71e90baeb4752526c041fd47310cc8c791",
          "body": "Two new regression modules close the gap the docs-accuracy tests left\nopen (they checked claims, not behaviour):\n\n1. tests/test_regression_examples.py — every script under examples/\n   and examples/hybrid/ (plus both shell walkthroughs) runs as a real\n   subprocess against the repo fixtures; optiona\n[…]\numn\nnames as the CSV body. Fixed in cli.py with an in-process\nreal-fixture test (the existing tests mocked the stats shape).\n\n815 tests, coverage gate at 100%; README/FAQ counts and CHANGELOG\nupdated.",
          "is_bot": false,
          "headline": "test(regression): execute every example script and doc code block in CI",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T19:41:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eaedd9dd7e65edd008fc69cb2786cb15aa7105f6",
          "body": "…ing, reverify, multi-currency\n\nFour quick wins for existing users of the hybrid pipeline:\n\n1. Per-row provenance: SourceMethod gains the \"vision\" literal and\n   the vision path labels its rows \"vision\" instead of \"llm\"\n   (_build_result grows a source_method parameter).\n2. Confidence is acted on: n\n[…]\nfy_transactions (currency-aware dispatch) is exported from\n   bankstatementparser.hybrid and shared by orchestrator and CLI.\n\n746 tests, coverage gate at 100%; README/FAQ counts and CHANGELOG\nupdated.",
          "is_bot": false,
          "headline": "feat(hybrid): trust & correctness slice — provenance, confidence rout…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T18:54:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6dcd2dd3a15b013c41095a987fd18db8308a656",
          "body": "The export_csv/export_json cleanup tests hardcoded\n\"/tmp/test_bsp_output.*\": on windows-latest the simulated partial\n.tmp write failed with FileNotFoundError before the cleanup branch\n(base_parser.py:111/141) could run, leaving Windows coverage at\n99.89% against the 100% gate. Build the path from\ntempfile.gettempdir() instead, and do the same for the\ndirectory-rejection check in test_security.py.",
          "is_bot": false,
          "headline": "fix(test): use the platform temp dir so export-cleanup runs on Windows",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T17:21:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d23b93cb78e5fea15e8cd118f827acf0fa39447",
          "body": "The new windows-latest unit-test jobs surfaced three POSIX\nassumptions in the test suite:\n\n- chmod(0o000) does not revoke read access on Windows: the five\n  permission tests now mock os.access / builtins.open instead,\n  exercising the same parser and validator branches on every\n  platform (coverage \n[…]\nn NamedTemporaryFile\n  context fail with WinError 32: the nine affected tests now\n  close the handle before parsing, exporting, or unlinking\n\n696 tests pass locally with the 100% coverage gate intact.",
          "is_bot": false,
          "headline": "fix(test): make 16 tests Windows-compatible for the CI matrix",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T17:10:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "35fe6fb7d41c05df2743941eb4056ab4ae7e5a83",
          "body": "The unit-tests job's multi-line pytest command uses backslash\ncontinuations, but windows-latest executes run steps under\nPowerShell by default, which fails to parse them (ParserError:\n\"Missing expression after unary operator '--'\"). Set\n`shell: bash` on the step, matching the platform-parity job's\nexisting configuration.",
          "is_bot": false,
          "headline": "fix(ci): run unit-test step under bash on Windows runners",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T05:57:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7040ac257ccc515b9d105e56d6dd213871930e2a",
          "body": "Implements the 9-item v0.1.0 audit plan plus 100% coverage and\ndocumentation:\n\n- BREAKING: Pain001Parser.get_summary() raises on invalid ISO 20022\n  amounts instead of silently zeroing (shared _amounts.iso_decimal)\n- BREAKING: openpyxl moved to the new [excel] extra; core install no\n  longer pulls i\n[…]\nCAMT\n  recovery mode, and scanner failure_count; one justified pragma\n- README restyled to noyalib conventions (Contents TOC, dividers,\n  Documentation table); test-count and coverage claims re-synced",
          "is_bot": false,
          "headline": "feat(v0.1.0): API safety, 100% coverage gate, docs site, full CI matrix",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-11T00:41:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "492e4e468755ff41d6043c3f55be8468d747430c",
          "body": "…e gate, CLI dedupe\n\nCorrectness\n- Decimal end-to-end for all money fields; garbled or missing amounts\n  now raise instead of silently becoming 0.0 (new _amounts.py helpers)\n- Dedup keys are occurrence-counted (<hash>:<n>) and include\n  transaction_id/reference; fixed index-space bug in\n  Deduplicat\n[…]\n03 tests pass; ruff, mypy --strict, bandit all clean\n\nDocs\n- README/FAQ/CONTRIBUTING/compliance docs: \"100% branch coverage\" and\n  \"697 tests\" claims replaced with real figures (703 tests, 31 modules)",
          "is_bot": false,
          "headline": "feat(v0.0.9): audit remediation — Decimal correctness, honest coverag…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-10T21:40:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2a6f84b0639f5f46812a532f0a6bc3f7a101fb56",
          "body": "Bumps every live version reference in the repo to 0.0.9. Historical\nmarkers (README feature-row annotations like (v0.0.8), test docstrings\nthat document when each test landed, and the CHANGELOG history) are\ndeliberately preserved.\n\nChanged\n-------\n* pyproject.toml          version = \"0.0.9\"\n* setup.\n[…]\n.\n* bandit clean.\n* scripts/verify_locked_hashes.py 100 packages SHA-256 verified.\n* requirements.txt regenerated from poetry.lock (no content change\n  vs. previous commit; bytes-identical 915 lines).",
          "is_bot": false,
          "headline": "chore(v0.0.9): bump live version strings 0.0.8 -> 0.0.9",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-10T20:04:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11ab677fe8c9edb7cf6f8f225cfcd8920156c91d",
          "body": "…t bumps\n\nThree Critical findings from the v0.0.9 internal audit, six quick wins,\nall 20 open Dependabot version-bump PRs drained, and all 18 open\nDependabot security alerts resolved. 30 files: +3,185 / -5,009.\n\nCritical fixes\n--------------\n* C-1 REST API safety floor (api.py): chunked upload with\n\n[…]\nhashes.py: 100 packages SHA-256 verified\n  (down from 113 because dup-version entries dropped out).\n* pip install --dry-run --require-hashes -r requirements.txt clean\n  (regenerated from poetry.lock).",
          "is_bot": false,
          "headline": "feat(v0.0.9): audit pass — Critical fixes, security alerts, Dependabo…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-06-10T19:33:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5bdabd92de0c367f542848afd8f1e1ee2ae8ac4b",
          "body": "The v0.0.8 release shipped with updated counts and CHANGELOG but\nthe README content was missing for all five new features.\n\nKey Features table:\n  * 5 new rows: Multi-currency verification, hledger/beancount\n    export, Bulk directory scanner, Account mapping, REST API\n\nInstall section:\n  * Added [en\n[…]\nsage,\n    curl examples for /ingest and /health\n\nProject Layout:\n  * Added enrichment/, export/, api.py lines\n  * Updated descriptions to match v0.0.8 module inventory\n\n32/32 docs accuracy tests pass.",
          "is_bot": false,
          "headline": "docs: add v0.0.8 features to README",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T17:58:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b950a7622c9c167f06a79750646a9c0ed847d700",
          "body": "723 tests, 100% coverage. Multi-currency verification, ledger export, scanner, account mapper, REST API.",
          "is_bot": false,
          "headline": "Merge PR #52: feat(v0.0.8) Full Platform",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T17:38:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86ed5efee52a3dd180a7300abe76f39bcb3394aa",
          "body": "…or Python 3.14 compat",
          "is_bot": false,
          "headline": "fix(test): use asyncio.run() instead of deprecated get_event_loop() f…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T17:10:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00d584d6f09eee8364afa2ca31e15c19407b9caf",
          "body": "… account mapper, REST API\n\nFive new features closing every gap identified in the competitive\nanalysis against felgru/bank-statement-parser:\n\n1. Multi-currency balance verification\n   verify_balance_multi_currency() groups transactions by currency\n   and runs an independent Golden Rule check per gro\n[…]\n and GET /health. Gated behind\n   [api] extra. Default bind 127.0.0.1 (safe); use --host 0.0.0.0\n   for container deployments.\n\n723 tests at 100% coverage, mypy strict clean, ruff clean, bandit clean.",
          "is_bot": false,
          "headline": "feat(v0.0.8): full platform — multi-currency, ledger export, scanner,…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T17:05:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c86f30e542221d3e83d5440d24d97d63c988aba3",
          "body": "…inicpm-v, strip mode\n\n677 tests, 100% coverage. Closes the local vision 🔴→🟢 gap.",
          "is_bot": false,
          "headline": "Merge PR #51: feat(v0.0.7) Universal Vision — direct Ollama bridge, m…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T13:57:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9419be651bd2ec359e094413162ecab602215d3e",
          "body": "Line-by-line audit found two gaps in README.md:\n\n1. CLI section listed --type camt, pain001, ingest but NOT\n   --type review (added in v0.0.6). Added the review examples\n   and updated the \"Supports\" line.\n\n2. Key Features table had v0.0.5 rows but no v0.0.6 or v0.0.7\n   rows. Added 5 new entries: Categorization (v0.0.6),\n   Interactive review (v0.0.6), Bounding boxes (v0.0.6),\n   Direct Ollama bridge (v0.0.7), Strip mode (v0.0.7).",
          "is_bot": false,
          "headline": "docs: add --type review to CLI section + v0.0.6/v0.0.7 Key Features",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T13:52:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6787c90627906dff66b19dffd540320d52495f42",
          "body": "Post-rebase corrections caught by the docs accuracy test suite:\n  * README + FAQ: 644 tests -> 672 (v0.0.7 adds 28 ollama_direct\n    + strip-mode tests on top of v0.0.6's 644)\n  * README: 23 modules -> 24 (ollama_direct.py added)\n  * .github/SECURITY.md: 0.0.7 added to Supported Versions table",
          "is_bot": false,
          "headline": "docs: update counts + SECURITY.md for v0.0.7 post-rebase",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:53:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59bc348f5f1920a53f205278a83dff10db74610c",
          "body": "CodeQL flagged the previous assertion as\npy/incomplete-url-substring-sanitization (warning, high severity)\nbecause the rule looks for `url.startswith(prefix)` patterns used\nas sanitization checks for trusted-host validation.\n\nIn this test the startswith() was a verification that our code\ngenerates t\n[…]\ne test slightly stricter at the same time (the previous\nassertion would have passed for, e.g.,\n\"http://host.docker.internal.evil.com\" which is exactly the\nclass of bypass the CodeQL rule warns about).",
          "is_bot": false,
          "headline": "test: replace startswith() URL check with exact equality",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:35:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8771bd71ebdf81f2dc29a820d111e8280f8bce72",
          "body": "The quality-gates.yml workflow lists every test file explicitly\n(rather than `pytest tests/`), so newly added test files have to\nbe appended manually. Adding tests/test_hybrid_ollama_direct.py\nwhich lands the 21 new tests for the v0.0.7 direct Ollama bridge.\n\nWithout this entry, CI ran 569 - 21 = 54\n[…]\npytest discovers all\ntests/test_*.py files by default) but CI used the explicit list.\n\nSame fix pattern as the v0.0.5 commit b246e09 which originally\nadded all seven hybrid test files to the workflow.",
          "is_bot": false,
          "headline": "ci: collect test_hybrid_ollama_direct.py in unit-tests workflow",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:35:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bb44c53c8e17387f822d5e1ad1d09217d47ed105",
          "body": "CI runs `poetry install --with dev` without any extras, so httpx\n(which is a transitive dep of litellm in the [hybrid] extra and\ntherefore not in the dev environment) isn't importable on the\nsandbox. mypy on CI failed with:\n\n  bankstatementparser/hybrid/ollama_direct.py:92: error: Cannot\n  find impl\n[…]\nnimum install.\nThe hybrid module's runtime imports of httpx are wrapped in\ntry/except inside ollama_direct.py and raise a clear install\nhint at call time, so the no-extras path is genuinely supported.",
          "is_bot": false,
          "headline": "ci: add httpx to mypy ignore_missing_imports",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:35:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c85e74412743fb3908719dc9617f619401f21c84",
          "body": "Documentation refresh and version bump for v0.0.7 \"Universal\nVision\". Three independent improvements stacked on top of v0.0.6:\n\n  1. Direct Ollama bridge (committed in fea4a5e parent commits)\n     turns the LiteLLM long-prompt hang from 600 s into ~33 s\n  2. Recommended local vision model switched f\n[…]\nutomatically as of v0.0.7\"; the llava\n      hallucination row now points at minicpm-v as the local fix;\n      two new rows cover strip-mode year confabulation and\n      sign-flip on small local models",
          "is_bot": false,
          "headline": "docs(v0.0.7): minicpm-v default + smoke-test results + version bump",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:35:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e535653b59173c8859083c403373b764d25e5c77",
          "body": "Adds 6 new tests covering the strip_rows code path that landed in\nthe previous commit:\n\n  test_strip_extractor_calls_completion_per_strip\n      End-to-end happy path: 4 strips on a 1-page synthetic PDF,\n      header strip extracts balances + 1 transaction, body strips\n      extract transactions only\n[…]\nase64 image_url.\n\nAll tests use the same sys.modules monkeypatching pattern as the\nexisting single-shot vision tests, so the strip mode works in CI\nwithout pypdfium2 installed. Coverage stays at 100%.",
          "is_bot": false,
          "headline": "test(hybrid): strip-mode tests for VisionExtractor",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:31:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8dd67c69dfe081cea2f4d62d93c86f843fa2fdeb",
          "body": "Adds bankstatementparser/hybrid/ollama_direct.py — a small (~190\nline) drop-in replacement for litellm.completion that targets\nOllama's /api/chat endpoint via httpx. Designed to sidestep the\nupstream LiteLLM ↔ Ollama integration bug discovered during the\nv0.0.5 smoke test, where vision calls with lo\n[…]\nnal dependency is needed.\n\n21 new tests in test_hybrid_ollama_direct.py mock httpx via\nsys.modules; the entire bridge is exercised end-to-end without a\nrunning Ollama instance. Coverage stays at 100%.",
          "is_bot": false,
          "headline": "feat(hybrid): direct Ollama bridge bypasses LiteLLM long-prompt hang",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T12:31:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "23c738e55f432dcb6ee3d1ef09b770bcea8a08fc",
          "body": null,
          "is_bot": false,
          "headline": "chore: gitignore example-output/ (generated export artifacts)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T09:29:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c01f13becf9e8ee70df56e86e4902eab99d13413",
          "body": "Resolves GHSA-3crg-w4f6-42mx. Supersedes dependabot PR #50.\nLockfile-only change — pyproject.toml already allows >=4.0.0.",
          "is_bot": false,
          "headline": "chore(deps): bump pypdf 6.9.2 → 6.10.0",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-11T08:24:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86431e15b2a3ec667a3810ce6342fbeab5188e30",
          "body": "Full v0.0.6 milestone: Python 3.9 drop, categorization, review mode, bbox mapping, security hardening. 649 tests, 100% coverage.",
          "is_bot": false,
          "headline": "Merge PR #48: feat(v0.0.6) Intelligence Layer — closes #44 #45 #46 #47",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T23:04:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1a1ba52535cba9f17d24a6f63216185f5516f11",
          "body": "…lity\n\nThe CAMT streaming throughput test has failed twice on GitHub\nActions shared runners (9,825 and 9,914 TPS) while consistently\npassing locally (27,000+ TPS). The root cause is CPU throttling\non shared CI runners combined with pytest-cov instrumentation\noverhead, NOT a real performance regressi\n[…]\n an accidental synchronous I/O in the hot path) will fail\nthe test on every platform. The test name is updated from\ntest_camt_exceeds_10000_tps to test_camt_exceeds_8000_tps to\nmatch the new contract.",
          "is_bot": false,
          "headline": "fix(test): lower CAMT TPS threshold from 10,000 to 8,000 for CI stabi…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T22:16:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d033119783bf38f2110d452c019c5203644ebe2",
          "body": "New .githooks/pre-commit script that runs the same 4 gates CI\nenforces (ruff + mypy + pytest + bandit, ~80s on Apple Silicon)\nbefore every commit. If any gate fails, the commit is aborted.\n\nSetup: `make install-hooks` (or `git config core.hooksPath\n.githooks`). One-time per clone, idempotent, safe t\n[…]\nw includes `make install-hooks` in the clone\n    instructions\n  * New paragraph explaining the hook + how to skip on WIP\n\nREADME.md Local Development:\n  * Added `make install-hooks` to the setup block",
          "is_bot": false,
          "headline": "chore: add pre-commit hook running full `make verify` pipeline",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T21:32:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d72cd140a572fccacaed1b4e143e6cce87fd981b",
          "body": "New test_docs_accuracy.py with 32 tests across 8 categories that\nvalidate every factual claim in README, FAQ, CHANGELOG,\nCONTRIBUTING, SECURITY, and the example scripts against the\nactual codebase. If a doc gets stale, the test fails with a clear\nmessage telling the developer what to fix.\n\nCategorie\n[…]\nfunction counting) is 644.\npytest --collect-only shows 649 because benchmark fixtures\ngenerate multiple test items from a single def test_* function.\n\nCI workflow updated to include the new test file.",
          "is_bot": false,
          "headline": "test(docs): automated docs/README/examples accuracy validation",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T21:03:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1ec8fd9cb7c0c1c6fd2c5e130178d4eaad4b7f9",
          "body": "Addresses every real finding from the pre-merge security,\ncorrectness, and performance audit.\n\nSECURITY\n\n  S1 — Prompt injection defense in enrichment categorizer.\n  New _sanitize_for_prompt() strips ASCII control characters,\n  neutralizes common injection markers ([SYSTEM, [INST), and\n  removes bac\n[…]\n_injection_markers\n  * test_categorize_warns_on_duplicate_llm_index\n  * test_ingest_result_from_json_rejects_oversized_payload\n\n617 tests at 100% coverage, mypy strict clean, ruff clean,\nbandit clean.",
          "is_bot": false,
          "headline": "fix(security+correctness): deep-dive audit findings",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T19:35:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d8e298584aba62cb4eeb1cfa7d172b6c344c65c",
          "body": "Audit finding: four files had stale \"541 tests\" counts that should\nbe 612 (the feat/v0.0.6 branch added 71 tests for #44/#45/#46).\nREADME module count was \"21\" but the actual count is 23 (the new\nenrichment/ subpackage adds 2 files: __init__.py + categorizer.py).\n\nREADME.md\n  * \"541 tests\" -> \"612 t\n[…]\n#46, #47\"\n\nCross-referenced against actual counts:\n  pytest --collect-only   612 tests collected\n  find -name \"*.py\"       23 modules\n  ls examples/**          22 scripts (14 deterministic + 8 hybrid)",
          "is_bot": false,
          "headline": "docs: fix stale counts + expand v0.0.6 CHANGELOG to full milestone",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T19:05:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "700824737eafec742512c7da1aabd435b05c36da",
          "body": "The previous commit added the [enrichment] extra to pyproject.toml\n(litellm only) without regenerating the lockfile. CI fails with\n\"pyproject.toml changed significantly since poetry.lock was last\ngenerated\" — same pattern as the v0.0.5 lockfile refresh.",
          "is_bot": false,
          "headline": "chore(deps): refresh poetry.lock for [enrichment] extra",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T17:59:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66433e5a20a81105d564800718e45496f8143811",
          "body": "Adds tests/test_enrichment_categorizer.py and\ntests/test_hybrid_review_cli.py to the quality-gates.yml explicit\ntest file list. Without this, CI runs 612 - 52 = 560 tests and\nmisses the new modules' coverage.",
          "is_bot": false,
          "headline": "ci: collect enrichment + review CLI tests in workflow",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T17:51:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc355a6d059a91c73793dd27e346967392b77e3b",
          "body": "…ound-trip\n\nCloses #45.\n\nIngestResult JSON serialization:\n  * New to_json() instance method produces a stable JSON string\n    with schema_version=1, Decimal amounts as strings (no float\n    drift), ISO-formatted dates, VerificationStatus enum values,\n    and an audit_trail array.\n  * New from_json()\n[…]\ntus,\ncorrupt-JSON, explicit-output-path, bbox+raw rendering,\nEOF-as-quit, missing-extra, dispatch-via-run,\nconfidence-absent).\n\n612 tests at 100% line + branch coverage, mypy strict clean,\nruff clean.",
          "is_bot": false,
          "headline": "feat(cli): interactive --type review subcommand + IngestResult JSON r…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T17:50:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8a697cbb8f4a3d73ae8f8582482a7d35dd832a7a",
          "body": "Closes #44.\n\nNew bankstatementparser.enrichment subpackage behind the\n[enrichment] install extra (just litellm — no additional deps).\n\n  Categorizer            LiteLLM-backed transaction categorizer\n                         with pluggable schema and batch support\n  EnrichedTransaction    Wrapper (no\n[…]\ne boundaries, case\nnormalization, unknown categories, missing/optional fields,\nmissing-row handling, graceful failure on LLM errors, JSON\nparsing (fenced, prose-wrapped, invalid), and prompt building.",
          "is_bot": false,
          "headline": "feat(enrichment): categorization module with pluggable schema",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T17:50:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "719571710dee848175493b523bb7e1014d858062",
          "body": "Closes #46.\n\nNew BoundingBox Pydantic model in transaction_models.py with\nnormalized (0.0-1.0) coordinates, page_index, and frozen config.\nNew Transaction.source_bbox: Optional[BoundingBox] field populated\nby the vision path when the multimodal model returns spatial\ncoordinates (always None for dete\n[…]\nw tests in test_hybrid_llm_extractor.py covering: bbox\npresent, bbox with explicit page_index, bbox omitted, bbox\nexplicitly null, non-object bbox, missing required keys, and\nout-of-range coordinates.",
          "is_bot": false,
          "headline": "feat(model): BoundingBox + Transaction.source_bbox + vision bbox prompts",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-10T17:50:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6399c814b407bb3b48933f58162ca8bfb2ca3022",
          "body": "P2 polishing items from the v0.0.6 audit that touch source files\nrather than docs:\n\n  bankstatementparser/hybrid/orchestrator.py\n    * Module docstring expanded from a one-line summary to a\n      structured Sphinx-style description of the three-path\n      routing (Path A deterministic, Path B text-L\n[…]\nPython floor changes, classifiers, and version\nbumps. The setup.* files only need to be touched when one of\nthose changes affects pip-21.3-or-older compatibility (which\nis essentially never in 2026+).",
          "is_bot": false,
          "headline": "docs(code): orchestrator docstring + legacy setup mirror annotations",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T16:43:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "db7f5e0e2a02d8bc900c09f73d722456af71e6b5",
          "body": "Implements all P1 and P2 items from the v0.0.6 documentation audit.\n\nP1 — Missing context\n\n  CONTRIBUTING.md\n    * New \"Optional extras for hybrid pipeline work\" subsection\n      listing [hybrid], [hybrid-plus], and [hybrid-vision] with\n      one-line guidance per extra\n    * `make verify` recommend\n[…]\nCross-platform matrix in examples/hybrid/README.md updated\n      to reflect that native Windows is now fully covered\n\n  examples/README.md\n    * Hybrid section gains the .ps1 row alongside the .sh row",
          "is_bot": false,
          "headline": "docs: P1 + P2 audit fixes for v0.0.6",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T16:41:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "55afee2ac76bf957e4e9d3e4955ae4bb2d2704c0",
          "body": "The previous Makefile used `python3 setup.py sdist bdist_wheel` and\n`twine upload`, which contradicted the actual v0.0.5 release flow\n(`poetry build` + `poetry publish`) and pointed at drifting setup.py\nmetadata. Anyone running `make release` would have produced an\nartifact from the legacy parallel \n[…]\n.md's\n    signed-commits policy\n  * Pushes the branch and the tag separately so a failed publish\n    leaves the tag visible upstream for retry\n\nResolves the P0 alignment finding from the v0.0.6 audit.",
          "is_bot": false,
          "headline": "chore!: modernise Makefile for Poetry-based build + release flow",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T16:40:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "755105c84d0c0924f291a995351ba52ff88f9327",
          "body": "CHANGELOG.md\n  * New v0.0.6 section with Removed / Security / Changed / Fixed /\n    Migration notes subsections\n  * Security table mapping each transitive package to its v0.0.5\n    -> v0.0.6 version bump and the GHSAs that close as a result\n  * Migration note explicitly tells Python 3.9 holdouts to \n[…]\n v=0.0.6\n  * Requirements line \"Python **3.9** through **3.14**\" -> \"Python\n    **3.10** through **3.14** (Python 3.9 was dropped in v0.0.6 —\n    pin to v0.0.5 if you cannot upgrade your interpreter)\"",
          "is_bot": false,
          "headline": "docs: v0.0.6 changelog entry + README Python floor update",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T16:00:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fea4a5e984500d82c1f83e30cc5ddce5dc04b120",
          "body": "BREAKING CHANGE: minimum supported Python is now 3.10. Users on\nPython 3.9 must stay on v0.0.5 or upgrade their interpreter. The\npublic API is unchanged.\n\nCloses #47.\n\nPython 3.9 reached end-of-life on 2025-10-31. v0.0.5 shipped with\nnine transitive CVEs allow-listed in security.yml because the\npatc\n[…]\ner/, tests/, examples/\n  * bandit clean\n  * All hybrid examples (01 deterministic, 02 text-LLM mock,\n    03 vision mock, 04 golden rule, 05 dedupe) still run\n    end-to-end with the new dependency set",
          "is_bot": false,
          "headline": "feat!: drop Python 3.9 support, clear transitive CVE allow-list",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T15:57:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c67f5076eb60c6ee0ab9fb2800e40910c7b135a4",
          "body": "… vision fallback\n\nRelease v0.0.5 — Universal Extraction. 13 commits, 541 tests, 100% coverage. See CHANGELOG.md for the full breakdown.",
          "is_bot": false,
          "headline": "Merge PR #43: feat(v0.0.5) hybrid deterministic + LLM extraction with…",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T13:11:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b512cd70d2aba8520ce7e0d3ca9e8fe2350aa5de",
          "body": "Three pre-release polish items consolidated into one commit so the\nv0.0.5 tag has a clean tip:\n\n1. Console-script entry point\n   * New `bankstatementparser.cli.main()` wrapper\n   * `[tool.poetry.scripts]` block in pyproject.toml mapping the\n     `bankstatementparser` command to `cli:main`\n   * Both \n[…]\ns\n\nVerified: 541 tests at 100% coverage, mypy strict clean, ruff\nclean, bandit clean. The console-script smoke test against the\nCAMT.053 fixture returns the expected DataFrame with all v0.0.5\ncolumns.",
          "is_bot": false,
          "headline": "docs: pre-release polish — console script, README, CHANGELOG",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T13:05:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e497ebd6bdc81df4be82b8d2bdc66c930abb2894",
          "body": "Ran every example end-to-end against local Ollama models on Apple\nSilicon (llama3 4.7 GB, llava 4.7 GB) to validate the library code\nwith the real LLM stack.\n\nFindings:\n\n  Path A (deterministic)   PERFECT — CAMT.053 fixture, 3 tx, all\n                           hashes correct\n  Path B (text-LLM)    \n[…]\nn its\nprocessing time. The default 2.0x is correct for hosted models\nwhich is what we now recommend in the inline comment.\n\nTest suite: still 540 tests at 100% coverage, ruff clean, mypy\nstrict clean.",
          "is_bot": false,
          "headline": "docs(examples): record smoke-test results against real Ollama models",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T12:30:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "86470870f8b2fee4da8468433005e99dd535d30d",
          "body": "Bandit B101 flagged the three `assert` statements in the example as\nunsafe because asserts are stripped under `python -O`. Replaced\nthem with an `_expect()` helper that raises SystemExit on contract\nviolation. Example output is unchanged in the happy path, but the\nfailure mode is now stable under all Python optimisation levels —\nwhich is the right behaviour for a script that doubles as a model\nfor downstream users to copy.",
          "is_bot": false,
          "headline": "ci: replace asserts with explicit raises in 04_golden_rule example",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T09:46:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec7b5828481efccf39a712fa789f1b4d6153ea98",
          "body": "Adds end-to-end runnable demonstrations of every v0.0.5 hybrid code\npath under examples/hybrid/. Real bank PDFs cannot be redistributed\n(PII + copyright), so the suite ships a `generate_sample_pdfs.py`\nscript that produces two reproducible synthetic UK-bank statements:\n\n  digital.pdf   text-layer PD\n[…]\nstrict\nclean, ruff clean, all five Python examples run end-to-end against\nthe live library (text-LLM and vision examples in MOCK mode), CLI\ningest subcommand smoke-tested against the CAMT.053 fixture.",
          "is_bot": false,
          "headline": "docs(examples): add hybrid pipeline walkthrough with synthetic PDFs",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T09:38:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a75f63588010be6575d2c1b65a0bec4ea67868c5",
          "body": "GHSA-gc5v-m9x4-r6x2 — insecure temp file reuse in\nrequests.utils.extract_zipped_paths(). Reachable only if a caller\nexplicitly invokes that helper to extract a zipped path bundle,\nwhich we never do — our only use of requests is through litellm's\nHTTP client. Patched in 2.33.0 which requires Python >\n[…]\n If a sixth surfaces,\nthe strategic fix is to scope the [hybrid] extras to Python >=\n3.10 rather than continuing to allow-list each transitive issue\nindividually. Python 3.9 reached EOL on 2025-10-31.",
          "is_bot": false,
          "headline": "ci: allow-list requests temp-file CVE (3.9 only)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:44:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a00518ff163fe3a5f65ea72d79a6ba2b4b564873",
          "body": "GHSA-w853-jp5j-5j7f and GHSA-qmgc-5h2g-mvrw — both TOCTOU symlink\nraces during lock acquisition, requiring an attacker with write\naccess to the user's lockfile parent directory. For a local CLI\nbank-statement parser, an attacker at that privilege level can read\nthe source statements directly; the fi\n[…]\n.3, both require Python >= 3.10.\nFilelock on Python 3.10+ already resolves to 3.25.2 (clean); the\nvulnerable 3.19.1 is locked only for the narrow `python_version\n== \"3.9\" and extra == \"hybrid\"` slice.",
          "is_bot": false,
          "headline": "ci: allow-list filelock TOCTOU CVEs (3.9 + hybrid only)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:38:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e396fca6eeef7eb6cd9f85d30397a0369aec8b06",
          "body": "GHSA-cfh3-3jmp-rvhc — out-of-bounds write loading PSD images,\npatched in pillow 12.1.1 which requires Python >= 3.10. Pillow on\nPython 3.10+ already resolves to 12.2.0 (clean); the vulnerable\n11.3.0 is locked only for the very narrow\n`python_version == \"3.9\" and extra == \"hybrid-plus\"` slice.\n\nThe PSD decoder is reachable only if a caller hands a Photoshop\nfile to Pillow — our PDF rendering path only emits and reads PNG,\nso the vulnerable code is not on any execution path we ship.",
          "is_bot": false,
          "headline": "ci: allow-list pillow PSD decoder CVE (3.9 + hybrid-plus only)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:32:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6e7417f7e3f5b19b0d9c5b7bccb37c98d47e1ce",
          "body": "GHSA-m959-cc7f-wv43 (incomplete DNS name constraint enforcement on\nX.509 peer names) was the third cryptography@43.0.3 advisory not\ncaught by the previous allow-list pass. Same scope justification as\nthe other two: we never use cryptography to validate X.509 certs\nfor peer authentication, so the vulnerable code path is unreachable\nfrom anything we ship. Patched in 46.0.6, blocked by the same\nPython > 3.9.1 floor as the rest of the cryptography series.",
          "is_bot": false,
          "headline": "ci: add third cryptography advisory to allow-list",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:27:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a75fce3b66fbac5b54e5c52293f660b2d6cad107",
          "body": "Two more advisories surfaced after the litellm allow-list landed,\nboth on cryptography@43.0.3 which litellm pulls in transitively:\n\n  GHSA-r6ph-v2qm-q3c2  SECT curve subgroup attack (high)\n  GHSA-79v4-65xg-pq4g  OpenSSL bundled in older wheels (low)\n\nNeither is reachable from our import surface — we\n[…]\n1, while bankstatementparser still supports Python\n3.9.0/3.9.1, so Poetry cannot bump them across the matrix. Same\n\"revisit when minimum Python is raised\" reminder as the litellm\nallow-list documents.",
          "is_bot": false,
          "headline": "ci: allow-list cryptography proxy CVEs (transitive via litellm)",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:24:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b246e0937eee6ccb4ac4da7251b2bc90dce040ad",
          "body": "Three CI fixes required after the initial v0.0.5 push:\n\n1. Unit-test workflow explicitly listed every test file by name and\n   never picked up the seven new hybrid test files, which dropped\n   coverage to 83%. Added all tests/test_hybrid_*.py to the list.\n\n2. Bandit flagged `except Exception: contin\n[…]\non `dependency-review-action` with a documented \"revisit when the\n   minimum Python is raised\" comment.\n\nLocally verified: 540 tests pass at 100% coverage, mypy strict clean,\nruff clean, bandit clean.",
          "is_bot": false,
          "headline": "ci: collect hybrid tests, narrow bandit catch, allow litellm proxy CVEs",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T08:17:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1c70d5b1d801237e27b54fcad86c58eff8be417a",
          "body": "Regenerates the lock file to match pyproject.toml after adding the\n[hybrid], [hybrid-plus], and [hybrid-vision] extras. Fixes CI failures\nwhere every job exited with:\n\n    pyproject.toml changed significantly since poetry.lock was last\n    generated. Run `poetry lock` to fix the lock file.\n\nAlso pic\n[…]\n\nsuperseding PRs #41 and #42:\n\n  * ruff    0.15.8 -> 0.15.9\n  * tzdata  2023.3 -> 2026.1\n\nVerified locally: ruff 0.15.9 lint clean, mypy strict clean, 540 tests\npassing with 100% line+branch coverage.",
          "is_bot": false,
          "headline": "chore(deps): refresh poetry.lock for v0.0.5 extras",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T07:56:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3b2fc17a462a5e014ffcce7e9bbba9cdc1ecca7",
          "body": "Release v0.0.5 \"Universal Extraction\". Combines the deterministic\nreliability of the ISO/exchange-format parsers with an adaptive\nLLM layer for unstandardized PDFs, including a multimodal vision\nfallback for scanned/image-only statements.\n\nArchitecture — three extraction paths via `smart_ingest()`:\n\n[…]\nmypy strict clean. All optional\ndependencies (litellm, pypdf, pypdfium2) are monkeypatched via\n`sys.modules` or completion-function injection, so CI does not\nrequire any of the extras to be installed.",
          "is_bot": false,
          "headline": "feat(hybrid): add deterministic+LLM pipeline with vision fallback",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T07:22:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "80a6454578619a818b5f12c77da378a6ee8322bd",
          "body": "Sweep-only change across 14 files. No functional modifications.\nFiles that also receive feature changes in v0.0.5 (cli, model,\ndeduplicator, input_validator) carry their updated headers alongside\nthose changes in the follow-up commit.",
          "is_bot": false,
          "headline": "chore: update copyright headers to 2023-2026 Bank Statement Parser",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-08T07:21:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "342363e5c554c72011e1d4a0537f32085fa2c967",
          "body": "---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
          "is_bot": false,
          "headline": "fix: bust GitHub badge cache for PyPI Python versions",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-01T14:29:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f00eb80ced2734b255488ee3346a23d3b474195",
          "body": "deps: bump ruff to 0.15.8 and codeql-action to 4.35.1",
          "is_bot": false,
          "headline": "deps: bump ruff to 0.15.8 and codeql-action to 4.35.1",
          "author_name": "Sebastien Rousseau",
          "author_login": "sebastienrousseau",
          "committed_at": "2026-04-01T13:55:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 11,
      "commits_last_year": 154,
      "latest_release_at": "2026-07-18T14:53:08Z",
      "latest_release_tag": "v0.0.11",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 11,
      "days_since_latest_release": 12,
      "mean_days_between_releases": 13.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 85,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "bankstatementparser",
          "exists": true,
          "license": "Apache Software License",
          "keywords": [
            "License :: Other/Proprietary License",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.10",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.13",
            "Programming Language :: Python :: 3.14"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/bankstatementparser/",
          "is_deprecated": false,
          "latest_version": "0.0.11",
          "repository_url": "https://github.com/sebastienrousseau/bankstatementparser",
          "versions_count": 8,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2023-11-08T21:26:11.541122Z",
          "latest_published_at": "2026-07-18T14:53:37.152696Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 12
        }
      ]
    },
    "popularity": {
      "forks": 8,
      "stars": 38,
      "watchers": 3,
      "fork_history": {
        "days": [
          {
            "date": "2024-10-12",
            "count": 1
          },
          {
            "date": "2025-09-19",
            "count": 1
          },
          {
            "date": "2026-04-27",
            "count": 1
          },
          {
            "date": "2026-04-29",
            "count": 1
          },
          {
            "date": "2026-06-01",
            "count": 1
          },
          {
            "date": "2026-06-10",
            "count": 1
          },
          {
            "date": "2026-07-18",
            "count": 1
          },
          {
            "date": "2026-07-26",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 8,
        "total_forks": 8
      },
      "star_history": null,
      "open_issues_and_prs": 9
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile",
        "mise.toml"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 52634,
      "source_files_sampled": 107,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "pyproject.toml",
        "requirements.txt",
        "setup.cfg"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 13,
        "malicious_count": 0,
        "assessed_package": "pypi:bankstatementparser@0.0.11",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "pypi"
      ],
      "dependencies": [
        {
          "name": "lxml",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=5.0"
        },
        {
          "name": "openpyxl",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "^3.1.5"
        },
        {
          "name": "pandas",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "^2.3.3"
        },
        {
          "name": "defusedxml",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "^0.7.1"
        },
        {
          "name": "pydantic",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "^2.11.0"
        },
        {
          "name": "polars",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "^1.32.0"
        },
        {
          "name": "litellm",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.83.10"
        },
        {
          "name": "pypdf",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=4.0.0"
        },
        {
          "name": "pdfplumber",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.11.0"
        },
        {
          "name": "pypdfium2",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=4.30.0"
        },
        {
          "name": "fastapi",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.115.0"
        },
        {
          "name": "uvicorn",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.34.0"
        },
        {
          "name": "lxml",
          "manifest": "setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">=4.9.3"
        },
        {
          "name": "openpyxl",
          "manifest": "setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">=3.1.2"
        },
        {
          "name": "pandas",
          "manifest": "setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">=2.1.1"
        },
        {
          "name": "defusedxml",
          "manifest": "setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">=0.7.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "defusedxml",
            "direct": true,
            "version": "0.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "fastapi",
            "direct": true,
            "version": "0.139.2",
            "ecosystem": "pypi"
          },
          {
            "name": "litellm",
            "direct": true,
            "version": "1.93.0",
            "ecosystem": "pypi"
          },
          {
            "name": "lxml",
            "direct": true,
            "version": "6.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "openpyxl",
            "direct": true,
            "version": "3.1.5",
            "ecosystem": "pypi"
          },
          {
            "name": "pandas",
            "direct": true,
            "version": "2.3.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pdfplumber",
            "direct": true,
            "version": "0.11.10",
            "ecosystem": "pypi"
          },
          {
            "name": "polars",
            "direct": true,
            "version": "1.43.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic",
            "direct": true,
            "version": "2.13.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pypdf",
            "direct": true,
            "version": "6.14.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pypdfium2",
            "direct": true,
            "version": "5.12.1",
            "ecosystem": "pypi"
          },
          {
            "name": "uvicorn",
            "direct": true,
            "version": "0.51.0",
            "ecosystem": "pypi"
          },
          {
            "name": "aiohappyeyeballs",
            "direct": false,
            "version": "2.6.2",
            "ecosystem": "pypi"
          },
          {
            "name": "aiohttp",
            "direct": false,
            "version": "3.14.1",
            "ecosystem": "pypi"
          },
          {
            "name": "aiosignal",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "annotated-doc",
            "direct": false,
            "version": "0.0.4",
            "ecosystem": "pypi"
          },
          {
            "name": "annotated-types",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "anyio",
            "direct": false,
            "version": "4.13.0",
            "ecosystem": "pypi"
          },
          {
            "name": "ast-serialize",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "async-timeout",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "attrs",
            "direct": false,
            "version": "26.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "babel",
            "direct": false,
            "version": "2.18.0",
            "ecosystem": "pypi"
          },
          {
            "name": "backrefs",
            "direct": false,
            "version": "7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "bandit",
            "direct": false,
            "version": "1.9.4",
            "ecosystem": "pypi"
          },
          {
            "name": "certifi",
            "direct": false,
            "version": "2026.5.20",
            "ecosystem": "pypi"
          },
          {
            "name": "cffi",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "charset-normalizer",
            "direct": false,
            "version": "3.4.7",
            "ecosystem": "pypi"
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.4.2",
            "ecosystem": "pypi"
          },
          {
            "name": "colorama",
            "direct": false,
            "version": "0.4.6",
            "ecosystem": "pypi"
          },
          {
            "name": "coverage",
            "direct": false,
            "version": "7.15.2",
            "ecosystem": "pypi"
          },
          {
            "name": "cryptography",
            "direct": false,
            "version": "48.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "distro",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "et-xmlfile",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "exceptiongroup",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "fastuuid",
            "direct": false,
            "version": "0.14.0",
            "ecosystem": "pypi"
          },
          {
            "name": "filelock",
            "direct": false,
            "version": "3.29.3",
            "ecosystem": "pypi"
          },
          {
            "name": "frozenlist",
            "direct": false,
            "version": "1.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "fsspec",
            "direct": false,
            "version": "2026.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "ghp-import",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "griffelib",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "pypi"
          },
          {
            "name": "h11",
            "direct": false,
            "version": "0.16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "hf-xet",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "httpcore",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "pypi"
          },
          {
            "name": "httpx",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "pypi"
          },
          {
            "name": "huggingface-hub",
            "direct": false,
            "version": "1.18.0",
            "ecosystem": "pypi"
          },
          {
            "name": "hypothesis",
            "direct": false,
            "version": "6.156.7",
            "ecosystem": "pypi"
          },
          {
            "name": "hypothesis",
            "direct": false,
            "version": "6.158.1",
            "ecosystem": "pypi"
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.18",
            "ecosystem": "pypi"
          },
          {
            "name": "importlib-metadata",
            "direct": false,
            "version": "8.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "iniconfig",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "interrogate",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jinja2",
            "direct": false,
            "version": "3.1.6",
            "ecosystem": "pypi"
          },
          {
            "name": "jiter",
            "direct": false,
            "version": "0.15.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema",
            "direct": false,
            "version": "4.26.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema-specifications",
            "direct": false,
            "version": "2025.9.1",
            "ecosystem": "pypi"
          },
          {
            "name": "librt",
            "direct": false,
            "version": "0.13.0",
            "ecosystem": "pypi"
          },
          {
            "name": "markdown",
            "direct": false,
            "version": "3.10.2",
            "ecosystem": "pypi"
          },
          {
            "name": "markdown-it-py",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "markupsafe",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "mdurl",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "mergedeep",
            "direct": false,
            "version": "1.3.4",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs",
            "direct": false,
            "version": "1.6.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-autorefs",
            "direct": false,
            "version": "1.4.4",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-get-deps",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-material",
            "direct": false,
            "version": "9.7.7",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-material-extensions",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocstrings",
            "direct": false,
            "version": "1.0.6",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocstrings-python",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "pypi"
          },
          {
            "name": "multidict",
            "direct": false,
            "version": "6.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mypy",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "mypy-extensions",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "numpy",
            "direct": false,
            "version": "2.2.6",
            "ecosystem": "pypi"
          },
          {
            "name": "openai",
            "direct": false,
            "version": "2.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "packaging",
            "direct": false,
            "version": "26.2",
            "ecosystem": "pypi"
          },
          {
            "name": "paginate",
            "direct": false,
            "version": "0.5.7",
            "ecosystem": "pypi"
          },
          {
            "name": "pathspec",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pdfminer-six",
            "direct": false,
            "version": "20260107",
            "ecosystem": "pypi"
          },
          {
            "name": "pillow",
            "direct": false,
            "version": "12.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "platformdirs",
            "direct": false,
            "version": "4.10.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pluggy",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "polars-runtime-32",
            "direct": false,
            "version": "1.43.0",
            "ecosystem": "pypi"
          },
          {
            "name": "propcache",
            "direct": false,
            "version": "0.5.2",
            "ecosystem": "pypi"
          },
          {
            "name": "py",
            "direct": false,
            "version": "1.11.0",
            "ecosystem": "pypi"
          },
          {
            "name": "py-cpuinfo",
            "direct": false,
            "version": "9.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pycparser",
            "direct": false,
            "version": "3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic-core",
            "direct": false,
            "version": "2.46.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pygments",
            "direct": false,
            "version": "2.20.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pymdown-extensions",
            "direct": false,
            "version": "11.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest",
            "direct": false,
            "version": "9.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-benchmark",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-cov",
            "direct": false,
            "version": "7.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-dateutil",
            "direct": false,
            "version": "2.9.0.post0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-dotenv",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pytz",
            "direct": false,
            "version": "2026.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml-env-tag",
            "direct": false,
            "version": "1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "referencing",
            "direct": false,
            "version": "0.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "regex",
            "direct": false,
            "version": "2026.5.9",
            "ecosystem": "pypi"
          },
          {
            "name": "requests",
            "direct": false,
            "version": "2.34.2",
            "ecosystem": "pypi"
          },
          {
            "name": "rich",
            "direct": false,
            "version": "15.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "rpds-py",
            "direct": false,
            "version": "0.30.0",
            "ecosystem": "pypi"
          },
          {
            "name": "ruff",
            "direct": false,
            "version": "0.15.22",
            "ecosystem": "pypi"
          },
          {
            "name": "shellingham",
            "direct": false,
            "version": "1.5.4",
            "ecosystem": "pypi"
          },
          {
            "name": "six",
            "direct": false,
            "version": "1.17.0",
            "ecosystem": "pypi"
          },
          {
            "name": "sniffio",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "sortedcontainers",
            "direct": false,
            "version": "2.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "starlette",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "stevedore",
            "direct": false,
            "version": "5.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "tabulate",
            "direct": false,
            "version": "0.10.0",
            "ecosystem": "pypi"
          },
          {
            "name": "tiktoken",
            "direct": false,
            "version": "0.13.0",
            "ecosystem": "pypi"
          },
          {
            "name": "tokenizers",
            "direct": false,
            "version": "0.23.1",
            "ecosystem": "pypi"
          },
          {
            "name": "tomli",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "pypi"
          },
          {
            "name": "tqdm",
            "direct": false,
            "version": "4.68.2",
            "ecosystem": "pypi"
          },
          {
            "name": "typer",
            "direct": false,
            "version": "0.25.1",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-extensions",
            "direct": false,
            "version": "4.16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-inspection",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "pypi"
          },
          {
            "name": "tzdata",
            "direct": false,
            "version": "2026.3",
            "ecosystem": "pypi"
          },
          {
            "name": "urllib3",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "watchdog",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "yarl",
            "direct": false,
            "version": "1.24.2",
            "ecosystem": "pypi"
          },
          {
            "name": "zipp",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 121,
        "direct_count": 12,
        "indirect_count": 109
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 9,
        "merged_prs": 41,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 7,
        "closed_unmerged_prs": 94
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "sebastienrousseau",
          "commits": 141,
          "avatar_url": "https://avatars.githubusercontent.com/u/1394998?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "commit-signature-verification.yml",
        "docs.yml",
        "pypi-publish.yml",
        "quality-gates.yml",
        "release-integrity.yml",
        "security.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".pylintrc"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "poetry.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/6 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 8,
            "reason": "dependency not pinned by hash detected -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 9,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "532d0255b8aca1166ee1ea2789b555cfe0c0f571",
        "ran_at": "2026-07-31T00:30:37Z",
        "aggregate_score": 7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-29T02:33:51Z",
      "oldest_open_prs": [
        {
          "number": 143,
          "created_at": "2026-07-29T02:33:36Z",
          "last_comment_at": "2026-07-29T02:33:37Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 144,
          "created_at": "2026-07-29T02:33:43Z",
          "last_comment_at": "2026-07-29T02:33:44Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 145,
          "created_at": "2026-07-29T02:33:48Z",
          "last_comment_at": "2026-07-29T02:33:49Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 146,
          "created_at": "2026-07-29T02:33:53Z",
          "last_comment_at": "2026-07-29T02:33:54Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 147,
          "created_at": "2026-07-29T02:33:59Z",
          "last_comment_at": "2026-07-29T02:33:59Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 148,
          "created_at": "2026-07-29T02:34:30Z",
          "last_comment_at": "2026-07-29T02:34:31Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 149,
          "created_at": "2026-07-29T02:35:14Z",
          "last_comment_at": "2026-07-29T02:35:15Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 150,
          "created_at": "2026-07-29T02:35:54Z",
          "last_comment_at": "2026-07-29T02:35:55Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 151,
          "created_at": "2026-07-29T02:36:27Z",
          "last_comment_at": "2026-07-29T02:36:28Z",
          "last_comment_author": "dependabot"
        }
      ],
      "last_merged_pr_at": "2026-07-28T19:46:53Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/sebastienrousseau/bankstatementparser",
    "host": "github.com",
    "name": "bankstatementparser",
    "owner": "sebastienrousseau"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "excellent",
      "name": "Overall health",
      "note": "The weighted overall 71 is calibrated to 84 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 71,
            "calibrated": 84,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 84,
      "inputs": {
        "security": 76,
        "vitality": 79,
        "community": 58,
        "governance": 54,
        "calibration": "2026-08-02",
        "engineering": 90,
        "ai_readiness": 61,
        "weighted_overall_raw": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 79,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "commits_last_year": 154,
              "human_commit_share": 0.8,
              "days_since_last_push": 1,
              "active_weeks_last_year": 11
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "11/52 weeks with commits",
                "points": 7.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 11
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "154 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 154
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 11,
              "latest_release_tag": "v0.0.11",
              "releases_from_tags": false,
              "days_since_latest_release": 12,
              "mean_days_between_releases": 13.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "11 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 12 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 12
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~13.1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 13.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 17,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 17 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 17
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 58,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 34,
            "inputs": {
              "forks": 8,
              "stars": 38,
              "watchers": 3,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "38 stars",
                "points": 25.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 38
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "8 forks",
                "points": 7,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "3 watchers",
                "points": 1.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 59,
            "inputs": {
              "merged_prs": 41,
              "open_issues": 0,
              "closed_issues": 7,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 94,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 42,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "41/135 decided PRs merged",
                "points": 9.1,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 41,
                      "decided": 135
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/6 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 63,
            "inputs": {
              "followers": 153,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "sebastienrousseau",
              "public_repos": 146,
              "account_age_days": 5294
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "153 followers of sebastienrousseau",
                "points": 15.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 153,
                      "login": "sebastienrousseau"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "146 public repos, account ~14 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 146
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 14
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "bankstatementparser"
              ],
              "ecosystems": "pypi",
              "any_deprecated": false,
              "min_days_since_publish": 12
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 12 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 12
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "8 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 90,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "6 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".pylintrc",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".pylintrc"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "exceptional",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "banking",
                "camt",
                "finance",
                "iso20022",
                "pain001",
                "bank-statements",
                "cli",
                "csv",
                "mt940",
                "ofx",
                "parser",
                "categorization",
                "deduplication",
                "litellm",
                "llm",
                "ollama",
                "pdf",
                "fintech",
                "rest-api",
                "treasury"
              ],
              "has_wiki": true,
              "homepage": "http://docs.bankstatementparser.com/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "http://docs.bankstatementparser.com/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "20 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 76,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/6 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:bankstatementparser@0.0.11 runtime dependency closure — what installing the published package pulls in — 13 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "pypi:bankstatementparser@0.0.11",
                  "assessed": 13
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 13,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 13,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 61,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "weak",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "80 of 80 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 80,
                      "sampled": 80
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 87,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "poetry.lock"
              ],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [
                "Makefile",
                "mise.toml"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.08,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.2
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile, mise.toml",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile, mise.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".pylintrc",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".pylintrc"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "8 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 8,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "20 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 20,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 52634,
              "source_files_sampled": 107,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/107 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 107,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "weak",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "top": [
        "library",
        "application"
      ],
      "labels": [
        "library",
        "network-service",
        "cli"
      ],
      "scores": {
        "cli": 4,
        "library": 6,
        "network-service": 4
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:pypi",
          "weight": 6
        },
        {
          "tier": "dependencies",
          "label": "network-service",
          "source": "dep:fastapi",
          "weight": 4
        },
        {
          "tier": "description",
          "label": "cli",
          "source": "description:cli",
          "weight": 2
        },
        {
          "tier": "tags",
          "label": "cli",
          "source": "tag:cli",
          "weight": 2
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": true,
      "consumed_by_code": true
    },
    "metrics_version": "2.5.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-31T00:30:52.739703Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sebastienrousseau/bankstatementparser.svg",
  "full_name": "sebastienrousseau/bankstatementparser",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Related records

Inspected repositories sharing catalogue tags or ecosystems with sebastienrousseau/bankstatementparser. Read them side by side →

100deepset-ai/haystackOpen-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modular pipelines and agent workflows with explicit control over retrieval, routing, memory, and generation. Built for scalable agents, RAG, multimodal applications, semantic search, and conversational systems.Exceptional100ray-project/rayRay is an AI compute engine. Ray consists of a core distributed runtime and a set of AI Libraries for accelerating ML workloads.Exceptional100run-llama/llama_indexLlamaIndex is the leading document agent and OCR platformExceptional99scalar/scalarScalar is an open-source API platform:　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　🌐 Modern REST API Client　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　📖 Beautiful API References　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　✨ 1st-Class OpenAPI/Swagger SupportExceptional99apache/supersetApache Superset is a Data Visualization and Data Exploration PlatformExceptional98nautechsystems/nautilus_traderProduction-grade Rust-native trading engine with deterministic event-driven architectureExceptional

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics — PyPI.