Public record
Software health reportschema 0.12.0 · metrics 2.10.0 · 2026-07-18 14:16 UTC

temporalio / sdk-python

Temporal Python SDK

PythonMIT★ 1,135 stars⑂ 208 forkssince Jan 2022View on GitHub ↗

temporalio/sdk-python holds a health index of 93 out of 100, placing it in the Exceptional band. It scores highest on Vitality (99/100) and lowest on Engineering Quality (61/100). It was last updated today. 3 contributors account for most of its recent work.

93
overall / 100
Exceptional

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.

93
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

The weighted overall 79 is calibrated to 93 on the published index scale (record calibration 2026-08-02).

Ownership

temporal.ioOrganization
3,569 followers217 public repossince Oct 2019

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publishTags
PyPItemporalio1.30.0-5115 days agotemporalworkflow

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

99Exceptional · 21% of overall
How it's scored
36/36Push recencylast push 0 days ago
34.6/36Commit cadence50/52 weeks with commits
18/18Commit volume373 commits in the last year
10/10OpenSSF Scorecard: Maintained30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year373
human_commit_share
days_since_last_push0
active_weeks_last_year50

Release discipline

100Exceptional
How it's scored
27/27Ships releases51 releases published
36/36Release recencylatest release 15 days ago
27/27Release cadencea release every ~7 days
0/10OpenSSF Scorecard: Signed-Releasesno data
Inputs used
releases_count51
latest_release_tag1.30.0
releases_from_tagsno
days_since_latest_release15
mean_days_between_releases7
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

76Good · 17% of overall
How it's scored
49.5/60Stars1,135 stars
19.3/25Forks208 forks
7.2/15Watchers21 watchers
Inputs used
forks208
stars1,135
watchers21
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
22.5/22.5Licenserecognized license (MIT)
18/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
6.3/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
readme_badges
has_contributingyes
has_issue_templateno
has_code_of_conductno
readme_badge_services
has_pull_request_templateyes

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

90Excellent · 23% of overall
How it's scored
36/54Bus factor3 contributor(s) cover half of all commits
17.4/22.5Commit distributiontop contributor authored 23% of commits
13.5/13.5Contributor breadth76 contributors
10/10OpenSSF Scorecard: Contributorsproject has 8 contributing companies or organizations
Inputs used
bus_factor3
contributors_sampled76
top_contributor_share0.226
How it's scored
35.9/42Issue resolution86% of issues closed
23.6/30PR acceptance751/953 decided PRs merged
0/13Newcomer PR acceptanceno first-time contributor's PR decided in 30d
15/15OpenSSF Scorecard: Code-Reviewall changesets reviewed
Inputs used
merged_prs751
open_issues95
closed_issues562
prs_merged_7d
prs_decided_7d
prs_merged_30d
prs_decided_30d
issue_closed_ratio0.855
closed_unmerged_prs202
first_time_authors_30d
first_time_prs_merged_30d
first_time_prs_decided_30d
Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.
How it's scored
30/30Ownership backingorganization-owned
0/20Verified domainverified-domain status not read for this organization
25/25Owner reach3,569 followers of temporalio
25/25Track record217 public repos, account ~6 yr old
Inputs used
followers3,569
owner_typeOrganization
is_verified
owner_logintemporalio
public_repos217
account_age_days2,470
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.

Package maintenance

100Exceptional
How it's scored
25/25Published & resolvable1 package(s) on pypi
35/35Publish recencylatest publish 15 days ago
20/20Version history51 published versions
20/20Not deprecatedactive, not deprecated or yanked
Inputs used
packagestemporalio
ecosystemspypi
any_deprecatedno
min_days_since_publish15

Engineering Quality

Are baseline engineering and documentation practices in place?

61Moderate · 19% of overall
How it's scored
24/24CI workflows4 workflow(s)
24/24Tests present
0/16Linter config
0/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests30 out of 30 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configno
has_precommit_configno

Documentation

50Moderate
How it's scored
30/30README
0/25Documentation directory
0/15Documentation / homepage site
10/10Repository description
10/10Topics6 topics
0/10Wiki
Inputs used
topicsdurable-execution, open-source, python, temporal-sdk, microservices, orchestration
has_wikino
homepage
docs_site
has_readmeyes
has_docs_dirno
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

67Good · 16% of overall
How it's scored
7.5/7.5Binary-Artifactsno binaries found in the repo
1.5/7.5Branch-Protectionbranch protection is not maximal on development and all release branches
2.5/2.5CI-Tests30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
7.5/7.5Code-Reviewall changesets reviewed
2.5/2.5Contributorsproject has 8 contributing companies or organizations
10/10Dangerous-Workflowno dangerous workflow patterns detected
7.5/7.5Dependency-Update-Toolupdate tool detected
0/5Fuzzingproject is not fuzzed
2.5/2.5Licenselicense file detected
7.5/7.5Maintained30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
5/5Packagingpackaging workflow detected
4/5Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 8
0/5SASTSAST tool is not run on all commits -- score normalized to 0
0/5Security-Policysecurity policy file not detected
0/7.5Signed-Releasesno data
7.5/7.5Token-PermissionsGitHub workflow tokens follow principle of least privilege
0/7.5Vulnerabilities15 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate6.7
Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.

68Good · 4% of overall
How it's scored
45/45Agent instructionsAGENTS.md
0/15Machine-readable docs (llms.txt)
0/40Legible commit historyno data
Inputs used
has_llms_txtno
llms_txt_url
legible_history_share
agent_instruction_filesAGENTS.md
agent_instruction_max_bytes5,019
Excluded from scoring (no data or not applicable): Legible commit history. Remaining weights renormalized.
How it's scored
0/18One-command bootstrap
22/22Automated tests
0/11Lint / format config
11/11Static type checkingtemporalio/py.typed
10/10Reproducible environmentDockerfile, lockfile
0/10Demonstrated agent practiceno data
5/8Automated maintenancedependency automation configured, none observed in the sampled commits
8/10OpenSSF Scorecard: Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 8
Inputs used
has_nixno
has_testsyes
lockfilesCargo.lock, uv.lock
has_dockerfileyes
typed_languageno
bootstrap_files
has_devcontainerno
has_linter_configno
typecheck_configstemporalio/py.typed
agent_commit_share
toolchain_manifests
dependency_bot_commit_share0
Excluded from scoring (no data or not applicable): Demonstrated agent practice. Remaining weights renormalized.
How it's scored
27/45Type-checkable codePython with type-check config (temporalio/py.typed)
52.8/55Manageable file sizes23/564 source files over 60KB
Inputs used
primary_languagePython
largest_source_bytes339,862
source_files_sampled564
oversized_source_files23
How it's scored
40/40API schema (OpenAPI/GraphQL/proto)scripts/_proto/grpc/health/v1/health.proto, scripts/_proto/temporal/api/common/v1/grpc_status.proto, tests/worker/workflow_sandbox/testmodules/proto/proto_message.proto
20/20MCP server
0/40Runnable examples
Inputs used
example_dirs
has_mcp_signalyes
api_schema_filesscripts/_proto/grpc/health/v1/health.proto, scripts/_proto/temporal/api/common/v1/grpc_status.proto, tests/worker/workflow_sandbox/testmodules/proto/proto_message.proto
interfaces_expected_of

Key facts

1,135GitHub stars
76contributors
373commits, last 12 months
0days since last push
51releases
3bus factor
95open issues
PyPIpackage ecosystems

More detail

OpenSSF Scorecard 6.7 / 10
6.7aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-18 14:15 UTC

10Binary-Artifactsno binaries found in the repo
2Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
10Code-Reviewall changesets reviewed
10Contributorsproject has 8 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
8Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 8
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
10Token-PermissionsGitHub workflow tokens follow principle of least privilege
0Vulnerabilities15 existing vulnerabilities detected
Direct dependencies 5
RegistryPackageVersion constraintManifest
PyPInexus-rpc==1.4.0pyproject.toml
PyPIprotobuf>=3.20,<8.0.0pyproject.toml
PyPIpython-dateutil>=2.8.2,<3pyproject.toml
PyPItypes-protobuf>=3.20,<8.0.0pyproject.toml
PyPItyping-extensions>=4.2.0,<5pyproject.toml
All dependencies 602

Full resolved dependency set from the GitHub dependency graph: 5 direct and 597 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
PyPInexus-rpc1.4.0direct
PyPIprotobuf6.33.6direct
PyPIpython-dateutil2.9.0.post0direct
PyPItypes-protobuf7.34.1.20260518direct
PyPItyping-extensions4.15.0direct
crates.ioadler22.0.1indirect
crates.ioaho-corasick1.1.4indirect
crates.ioallocator-api20.2.21indirect
crates.ioanstyle1.0.14indirect
crates.ioanyhow1.0.103indirect
crates.ioasync-trait0.1.89indirect
crates.ioatomic-waker1.1.2indirect
crates.ioautocfg1.5.1indirect
crates.ioaws-lc-rs1.17.1indirect
crates.ioaws-lc-sys0.42.0indirect
crates.ioaxum0.8.9indirect
crates.ioaxum-core0.5.6indirect
crates.iobackoff0.4.0indirect
crates.iobase640.22.1indirect
crates.iobitflags2.13.0indirect
crates.iobon3.9.3indirect
crates.iobon-macros3.9.3indirect
crates.iobumpalo3.20.3indirect
crates.iobytes1.12.0indirect
crates.iobzip20.6.1indirect
crates.iocc1.2.65indirect
crates.iocfg-if1.0.4indirect
crates.iocfg_aliases0.2.1indirect
crates.iochacha200.10.1indirect
crates.iochrono0.4.45indirect
crates.iocmake0.1.58indirect
crates.iocombine4.6.7indirect
crates.ioconvert_case0.10.0indirect
crates.iocore-foundation0.10.1indirect
crates.iocore-foundation-sys0.8.7indirect
crates.iocpufeatures0.3.0indirect
crates.iocrc32fast1.5.0indirect
crates.iocrossbeam-channel0.5.15indirect
crates.iocrossbeam-utils0.8.21indirect
crates.iodarling0.23.0indirect
crates.iodarling_core0.23.0indirect
crates.iodarling_macro0.23.0indirect
crates.ioderive_more2.1.1indirect
crates.ioderive_more-impl2.1.1indirect
crates.iodirs6.0.0indirect
crates.iodirs-sys0.5.0indirect
crates.iodisplaydoc0.2.6indirect
crates.iodowncast0.11.0indirect
crates.iodunce1.0.5indirect
crates.iodyn-clone1.0.20indirect
crates.ioeither1.16.0indirect
crates.ioenum-iterator2.3.0indirect
crates.ioenum-iterator-derive1.5.0indirect
crates.ioenum_dispatch0.3.13indirect
crates.ioequivalent1.0.2indirect
crates.ioerased-serde0.4.10indirect
crates.ioerrno0.3.14indirect
crates.iofastrand2.4.1indirect
crates.iofiletime0.2.29indirect
crates.iofind-msvc-tools0.1.9indirect
crates.iofixedbitset0.5.7indirect
crates.ioflate21.1.9indirect
crates.iofnv1.0.7indirect
crates.iofoldhash0.1.5indirect
crates.iofoldhash0.2.0indirect
crates.ioform_urlencoded1.2.2indirect
crates.iofragile2.1.0indirect
crates.iofs_extra1.3.0indirect
crates.iofutures0.3.32indirect
crates.iofutures-channel0.3.32indirect
crates.iofutures-core0.3.32indirect
crates.iofutures-executor0.3.32indirect
crates.iofutures-io0.3.32indirect
crates.iofutures-macro0.3.32indirect
crates.iofutures-retry0.6.0indirect
crates.iofutures-sink0.3.32indirect
crates.iofutures-task0.3.32indirect
crates.iofutures-util0.3.32indirect
crates.iogethostname1.1.0indirect
crates.iogetrandom0.2.17indirect
crates.iogetrandom0.3.4indirect
crates.iogetrandom0.4.3indirect
crates.ioh20.4.15indirect
crates.iohashbrown0.15.5indirect
crates.iohashbrown0.17.1indirect
crates.ioheck0.5.0indirect
crates.iohttp1.4.2indirect
crates.iohttp-body1.0.1indirect
crates.iohttp-body-util0.1.3indirect
crates.iohttparse1.10.1indirect
crates.iohttpdate1.0.3indirect
crates.iohyper1.10.1indirect
crates.iohyper-rustls0.27.9indirect
crates.iohyper-timeout0.5.2indirect
crates.iohyper-util0.1.20indirect
crates.ioicu_collections2.2.0indirect
crates.ioicu_locale_core2.2.0indirect
crates.ioicu_normalizer2.2.0indirect
crates.ioicu_normalizer_data2.2.0indirect
crates.ioicu_properties2.2.0indirect
crates.ioicu_properties_data2.2.0indirect
crates.ioicu_provider2.2.0indirect
crates.ioident_case1.0.1indirect
crates.ioidna1.1.0indirect
crates.ioidna_adapter1.2.2indirect
crates.ioindexmap2.14.0indirect
crates.ioinstant0.1.13indirect
crates.ioinventory0.3.24indirect
crates.ioipnet2.12.0indirect
crates.ioitertools0.14.0indirect
crates.ioitoa1.0.18indirect
crates.iojni0.22.4indirect
crates.iojni-macros0.22.4indirect
crates.iojni-sys0.4.1indirect
crates.iojni-sys-macros0.4.1indirect
crates.iojobserver0.1.34indirect
crates.iojs-sys0.3.103indirect
crates.iolazy_static1.5.0indirect
crates.iolibbz2-rs-sys0.2.5indirect
crates.iolibc0.2.186indirect
crates.iolibredox0.1.18indirect
crates.iolinux-raw-sys0.12.1indirect
crates.iolitemap0.8.2indirect
crates.iolock_api0.4.14indirect
crates.iolog0.4.33indirect
crates.iolru0.18.0indirect
crates.iolru-slab0.1.2indirect
crates.iomatchers0.2.0indirect
crates.iomatchit0.8.4indirect
crates.iomemchr2.8.2indirect
crates.iomime0.3.17indirect
crates.iominiz_oxide0.8.9indirect
crates.iomio1.2.1indirect
crates.iomockall0.14.0indirect
crates.iomockall_derive0.14.0indirect
crates.iomultimap0.10.1indirect
crates.iontapi0.4.3indirect
crates.ionu-ansi-term0.50.3indirect
crates.ionum-traits0.2.19indirect
crates.ioobjc2-core-foundation0.3.2indirect
crates.ioobjc2-io-kit0.3.2indirect
crates.ioonce_cell1.21.4indirect
crates.ioopenssl-probe0.2.1indirect
crates.ioopentelemetry0.32.0indirect
crates.ioopentelemetry-http0.32.0indirect
crates.ioopentelemetry-otlp0.32.0indirect
crates.ioopentelemetry-proto0.32.0indirect
crates.ioopentelemetry_sdk0.32.1indirect
crates.iooption-ext0.2.0indirect
crates.ioparking_lot0.12.5indirect
crates.ioparking_lot_core0.9.12indirect
crates.iopbjson0.9.0indirect
crates.iopbjson-build0.9.0indirect
crates.iopercent-encoding2.3.2indirect
crates.iopetgraph0.8.3indirect
crates.iopid4.0.0indirect
crates.iopin-project1.1.13indirect
crates.iopin-project-internal1.1.13indirect
crates.iopin-project-lite0.2.17indirect
crates.iopkg-config0.3.33indirect
crates.ioportable-atomic1.13.1indirect
crates.ioportable-atomic-util0.2.7indirect
crates.iopotential_utf0.1.5indirect
crates.ioppv-lite860.2.21indirect
crates.iopredicates3.1.4indirect
crates.iopredicates-core1.0.10indirect
crates.iopredicates-tree1.0.13indirect
crates.ioprettyplease0.2.37indirect
crates.ioproc-macro21.0.106indirect
crates.ioprometheus0.14.0indirect
crates.ioprost0.14.4indirect
crates.ioprost-build0.14.4indirect
crates.ioprost-derive0.14.4indirect
crates.ioprost-types0.14.4indirect
crates.ioprost-wkt0.7.1indirect
crates.ioprost-wkt-build0.7.1indirect
crates.ioprost-wkt-types0.7.1indirect
crates.iopulldown-cmark0.13.4indirect
crates.iopulldown-cmark-to-cmark22.0.0indirect
crates.iopyo30.29.0indirect
crates.iopyo3-async-runtimes0.29.0indirect
crates.iopyo3-build-config0.29.0indirect
crates.iopyo3-ffi0.29.0indirect
crates.iopyo3-macros0.29.0indirect
crates.iopyo3-macros-backend0.29.0indirect
crates.iopythonize0.29.0indirect
crates.ioquinn0.11.11indirect
crates.ioquinn-proto0.11.15indirect
crates.ioquinn-udp0.5.14indirect
crates.ioquote1.0.46indirect
crates.ior-efi5.3.0indirect
crates.ior-efi6.0.0indirect
crates.iorand0.10.2indirect
crates.iorand0.8.6indirect
crates.iorand0.9.4indirect
crates.iorand_chacha0.3.1indirect
crates.iorand_chacha0.9.0indirect
crates.iorand_core0.10.1indirect
crates.iorand_core0.6.4indirect
crates.iorand_core0.9.5indirect
crates.ioredox_syscall0.5.18indirect
crates.ioredox_users0.5.2indirect
crates.ioregex1.12.4indirect
crates.ioregex-automata0.4.14indirect
crates.ioregex-syntax0.8.11indirect
crates.ioreqwest0.12.28indirect
crates.ioreqwest0.13.4indirect
crates.ioring0.17.14indirect
crates.ioringbuf0.5.0indirect
crates.iorustc-hash2.1.2indirect
crates.iorustc_version0.4.1indirect
crates.iorustix1.1.4indirect
crates.iorustls0.23.41indirect
crates.iorustls-native-certs0.8.4indirect
crates.iorustls-pki-types1.15.0indirect
crates.iorustls-platform-verifier0.7.0indirect
crates.iorustls-platform-verifier-android0.1.1indirect
crates.iorustls-webpki0.103.13indirect
crates.iorustversion1.0.22indirect
crates.ioryu1.0.23indirect
crates.iosame-file1.0.6indirect
crates.ioschannel0.1.29indirect
crates.ioscopeguard1.2.0indirect
crates.iosecurity-framework3.7.0indirect
crates.iosecurity-framework-sys2.17.0indirect
crates.iosemver1.0.28indirect
crates.ioserde1.0.228indirect
crates.ioserde_core1.0.228indirect
crates.ioserde_derive1.0.228indirect
crates.ioserde_json1.0.150indirect
crates.ioserde_spanned1.1.1indirect
crates.ioserde_urlencoded0.7.1indirect
crates.iosharded-slab0.1.7indirect
crates.ioshlex2.0.1indirect
crates.iosignal-hook-registry1.4.8indirect
crates.iosimd-adler320.3.9indirect
crates.iosimd_cesu81.1.1indirect
crates.iosimdutf80.1.5indirect
crates.iosiphasher1.0.3indirect
crates.ioslab0.4.12indirect
crates.ioslotmap1.1.1indirect
crates.iosmallvec1.15.2indirect
crates.iosocket20.6.4indirect
crates.iostable_deref_trait1.2.1indirect
crates.iostrsim0.11.1indirect
crates.iosubtle2.6.1indirect
crates.iosyn2.0.118indirect
crates.iosync_wrapper1.0.2indirect
crates.iosynstructure0.13.2indirect
crates.iosysinfo0.38.4indirect
crates.iotar0.4.46indirect
crates.iotarget-lexicon0.13.5indirect
crates.iotempfile3.27.0indirect
crates.iotermtree0.5.1indirect
crates.iothiserror2.0.18indirect
crates.iothiserror-impl2.0.18indirect
crates.iothread_local1.1.9indirect
crates.iotinystr0.8.3indirect
crates.iotinyvec1.11.0indirect
crates.iotinyvec_macros0.1.1indirect
crates.iotokio1.52.3indirect
crates.iotokio-macros2.7.0indirect
crates.iotokio-rustls0.26.4indirect
crates.iotokio-stream0.1.18indirect
crates.iotokio-util0.7.18indirect
crates.iotoml1.1.2+spec-1.1.0indirect
crates.iotoml_datetime1.1.1+spec-1.1.0indirect
crates.iotoml_parser1.1.2+spec-1.1.0indirect
crates.iotoml_writer1.1.1+spec-1.1.0indirect
crates.iotonic0.14.6indirect
crates.iotonic-build0.14.6indirect
crates.iotonic-prost0.14.6indirect
crates.iotonic-prost-build0.14.6indirect
crates.iotonic-types0.14.6indirect
crates.iotower0.5.3indirect
crates.iotower-http0.6.11indirect
crates.iotower-layer0.3.3indirect
crates.iotower-service0.3.3indirect
crates.iotracing0.1.44indirect
crates.iotracing-attributes0.1.31indirect
crates.iotracing-core0.1.36indirect
crates.iotracing-subscriber0.3.23indirect
crates.iotry-lock0.2.5indirect
crates.iotyped-path0.12.3indirect
crates.iotypeid1.0.3indirect
crates.iotypetag0.2.22indirect
crates.iotypetag-impl0.2.22indirect
crates.iounicase2.9.0indirect
crates.iounicode-ident1.0.24indirect
crates.iounicode-segmentation1.13.3indirect
crates.iounicode-xid0.2.6indirect
crates.iountrusted0.9.0indirect
crates.iourl2.5.8indirect
crates.ioutf8_iter1.0.4indirect
crates.iouuid1.23.4indirect
crates.iovaluable0.1.1indirect
crates.ioversion_check0.9.5indirect
crates.iowalkdir2.5.0indirect
crates.iowant0.3.1indirect
crates.iowasi0.11.1+wasi-snapshot-preview1indirect
crates.iowasip21.0.4+wasi-0.2.12indirect
crates.iowasm-bindgen0.2.126indirect
crates.iowasm-bindgen-futures0.4.76indirect
crates.iowasm-bindgen-macro0.2.126indirect
crates.iowasm-bindgen-macro-support0.2.126indirect
crates.iowasm-bindgen-shared0.2.126indirect
crates.iowasm-streams0.5.0indirect
crates.ioweb-sys0.3.103indirect
crates.ioweb-time1.1.0indirect
crates.iowebpki-root-certs1.0.8indirect
crates.iowinapi0.3.9indirect
crates.iowinapi-i686-pc-windows-gnu0.4.0indirect
crates.iowinapi-util0.1.11indirect
crates.iowinapi-x86_64-pc-windows-gnu0.4.0indirect
crates.iowindows0.62.2indirect
crates.iowindows-collections0.3.2indirect
crates.iowindows-core0.62.2indirect
crates.iowindows-future0.3.2indirect
crates.iowindows-implement0.60.2indirect
crates.iowindows-interface0.59.3indirect
crates.iowindows-link0.2.1indirect
crates.iowindows-numerics0.3.1indirect
crates.iowindows-result0.4.1indirect
crates.iowindows-strings0.5.1indirect
crates.iowindows-sys0.52.0indirect
crates.iowindows-sys0.60.2indirect
crates.iowindows-sys0.61.2indirect
crates.iowindows-targets0.52.6indirect
crates.iowindows-targets0.53.5indirect
crates.iowindows-threading0.2.1indirect
crates.iowindows_aarch64_gnullvm0.52.6indirect
crates.iowindows_aarch64_gnullvm0.53.1indirect
crates.iowindows_aarch64_msvc0.52.6indirect
crates.iowindows_aarch64_msvc0.53.1indirect
crates.iowindows_i686_gnu0.52.6indirect
crates.iowindows_i686_gnu0.53.1indirect
crates.iowindows_i686_gnullvm0.52.6indirect
crates.iowindows_i686_gnullvm0.53.1indirect
crates.iowindows_i686_msvc0.52.6indirect
crates.iowindows_i686_msvc0.53.1indirect
crates.iowindows_x86_64_gnu0.52.6indirect
crates.iowindows_x86_64_gnu0.53.1indirect
crates.iowindows_x86_64_gnullvm0.52.6indirect
crates.iowindows_x86_64_gnullvm0.53.1indirect
crates.iowindows_x86_64_msvc0.52.6indirect
crates.iowindows_x86_64_msvc0.53.1indirect
crates.iowinnow1.0.3indirect
crates.iowit-bindgen0.57.1indirect
crates.iowriteable0.6.3indirect
crates.ioxattr1.6.1indirect
crates.ioyoke0.8.3indirect
crates.ioyoke-derive0.8.2indirect
crates.iozerocopy0.8.52indirect
crates.iozerocopy-derive0.8.52indirect
crates.iozerofrom0.1.8indirect
crates.iozerofrom-derive0.1.7indirect
crates.iozeroize1.9.0indirect
crates.iozerotrie0.2.4indirect
crates.iozerovec0.11.6indirect
crates.iozerovec-derive0.11.3indirect
crates.iozip8.6.0indirect
crates.iozlib-rs0.6.5indirect
crates.iozmij1.0.21indirect
crates.iozopfli0.8.3indirect
crates.iozstd0.13.3indirect
crates.iozstd-safe7.2.4indirect
crates.iozstd-sys2.0.16+zstd.1.5.7indirect
PyPIaioboto315.5.0indirect
PyPIaiobotocore2.25.1indirect
PyPIaiofiles25.1.0indirect
PyPIaiohappyeyeballs2.6.2indirect
PyPIaiohttp3.14.1indirect
PyPIaioitertools0.13.0indirect
PyPIaiosignal1.4.0indirect
PyPIaiosqlite0.22.1indirect
PyPIannotated-doc0.0.4indirect
PyPIannotated-types0.7.0indirect
PyPIantlr4-python3-runtime4.13.2indirect
PyPIanyio4.13.0indirect
PyPIasync-timeout5.0.1indirect
PyPIattrs26.1.0indirect
PyPIauthlib1.7.2indirect
PyPIautomat25.4.16indirect
PyPIaws-requests-auth0.4.3indirect
PyPIaws-sam-translator1.110.0indirect
PyPIaws-xray-sdk2.15.0indirect
PyPIbackports-tarfile1.2.0indirect
PyPIbasedpyright1.34.0indirect
PyPIbashlex0.18indirect
PyPIbeautifulsoup44.15.0indirect
PyPIblinker1.9.0indirect
PyPIboto31.40.61indirect
PyPIbotocore1.40.61indirect
PyPIbotocore-stubs1.43.14indirect
PyPIbracex2.6indirect
PyPIcachecontrol0.14.4indirect
PyPIcertifi2026.5.20indirect
PyPIcffi2.0.0indirect
PyPIcfn-lint1.51.4indirect
PyPIcharset-normalizer3.4.7indirect
PyPIcibuildwheel2.23.4indirect
PyPIclick8.4.1indirect
PyPIcolorama0.4.6indirect
PyPIconfigargparse1.7.5indirect
PyPIconstantly23.10.4indirect
PyPIcoverage7.14.1indirect
PyPIcryptography49.0.0indirect
PyPIdependency-groups1.3.1indirect
PyPIdill0.4.1indirect
PyPIdistro1.9.0indirect
PyPIdocker7.1.0indirect
PyPIdocstring-parser0.18.0indirect
PyPIdocutils0.23indirect
PyPIexceptiongroup1.3.1indirect
PyPIexecnet2.1.2indirect
PyPIfastapi0.137.1indirect
PyPIfastuuid0.14.0indirect
PyPIfilelock3.29.4indirect
PyPIflask3.1.3indirect
PyPIflask-cors6.0.5indirect
PyPIfrozenlist1.8.0indirect
PyPIfsspec2026.4.0indirect
PyPIgoogle-adk2.2.0indirect
PyPIgoogle-auth2.54.0indirect
PyPIgoogle-genai2.10.0indirect
PyPIgoogleapis-common-protos1.75.0indirect
PyPIgraphql-core3.2.11indirect
PyPIgraphviz0.21indirect
PyPIgriffelib2.0.2indirect
PyPIgrpcio1.81.1indirect
PyPIgrpcio-tools1.81.1indirect
PyPIh110.16.0indirect
PyPIhf-xet1.5.1indirect
PyPIhttpcore1.0.9indirect
PyPIhttpx0.28.1indirect
PyPIhttpx-sse0.4.3indirect
PyPIhuggingface-hub1.19.0indirect
PyPIhyperlink21.0.0indirect
PyPIidna3.18indirect
PyPIimportlib-metadata8.7.1indirect
PyPIincremental24.11.0indirect
PyPIiniconfig2.3.0indirect
PyPIitsdangerous2.2.0indirect
PyPIjaraco-classes3.4.0indirect
PyPIjaraco-context6.1.2indirect
PyPIjaraco-functools4.5.0indirect
PyPIjeepney0.9.0indirect
PyPIjinja23.1.6indirect
PyPIjiter0.15.0indirect
PyPIjmespath1.1.0indirect
PyPIjoserfc1.7.1indirect
PyPIjsonpatch1.33indirect
PyPIjsonpath-ng1.8.0indirect
PyPIjsonpointer3.1.1indirect
PyPIjsonschema4.26.0indirect
PyPIjsonschema-path0.5.0indirect
PyPIjsonschema-specifications2025.9.1indirect
PyPIkeyring25.7.0indirect
PyPIlangchain-core1.4.7indirect
PyPIlangchain-protocol0.0.17indirect
PyPIlanggraph1.2.5indirect
PyPIlanggraph-checkpoint4.1.1indirect
PyPIlanggraph-prebuilt1.1.0indirect
PyPIlanggraph-sdk0.4.2indirect
PyPIlangsmith0.8.16indirect
PyPIlazy-object-proxy1.12.0indirect
PyPIlitellm1.89.0indirect
PyPIlunr0.8.0indirect
PyPImarkdown-it-py4.2.0indirect
PyPImarkdownify1.2.2indirect
PyPImarkupsafe3.0.3indirect
PyPImaturin1.14.0indirect
PyPImcp1.27.2indirect
PyPImdurl0.1.2indirect
PyPImore-itertools11.1.0indirect
PyPImoto5.2.2indirect
PyPImpmath1.3.0indirect
PyPImsgpack1.2.0indirect
PyPImultidict6.7.1indirect
PyPImypy1.18.2indirect
PyPImypy-extensions1.1.0indirect
PyPImypy-protobuf3.7.0indirect
PyPInetworkx3.4.2indirect
PyPInetworkx3.6.1indirect
PyPInh30.3.5indirect
PyPInodeenv1.10.0indirect
PyPInodejs-wheel-binaries24.16.0indirect
PyPIopenai2.41.1indirect
PyPIopenai-agents0.17.7indirect
PyPIopenapi-schema-validator0.9.0indirect
PyPIopenapi-spec-validator0.9.0indirect
PyPIopeninference-instrumentation0.1.53indirect
PyPIopeninference-instrumentation-google-adk0.1.15indirect
PyPIopeninference-instrumentation-openai-agents1.6.1indirect
PyPIopeninference-semantic-conventions0.1.30indirect
PyPIopentelemetry-api1.41.1indirect
PyPIopentelemetry-exporter-otlp-proto-common1.41.1indirect
PyPIopentelemetry-exporter-otlp-proto-grpc1.41.1indirect
PyPIopentelemetry-instrumentation0.62b1indirect
PyPIopentelemetry-instrumentation-threading0.62b1indirect
PyPIopentelemetry-proto1.41.1indirect
PyPIopentelemetry-sdk1.41.1indirect
PyPIopentelemetry-sdk-extension-aws2.1.0indirect
PyPIopentelemetry-semantic-conventions0.62b1indirect
PyPIorjson3.11.9indirect
PyPIormsgpack1.12.2indirect
PyPIpackaging26.2indirect
PyPIpathable0.6.0indirect
PyPIpathspec1.1.1indirect
PyPIpillow12.2.0indirect
PyPIpkginfo1.12.1.2indirect
PyPIplatformdirs4.10.0indirect
PyPIpluggy1.6.0indirect
PyPIprompt-toolkit3.0.52indirect
PyPIpropcache0.5.2indirect
PyPIpsutil5.9.8indirect
PyPIpy-partiql-parser0.6.3indirect
PyPIpyasn10.6.3indirect
PyPIpyasn1-modules0.4.2indirect
PyPIpycparser3.0indirect
PyPIpydantic2.13.4indirect
PyPIpydantic-core2.46.4indirect
PyPIpydantic-settings2.14.1indirect
PyPIpydocstyle6.3.0indirect
PyPIpydoctor25.10.1indirect
PyPIpygments2.20.0indirect
PyPIpyjwt2.13.0indirect
PyPIpyopenssl26.3.0indirect
PyPIpyparsing3.3.2indirect
PyPIpyright1.1.403indirect
PyPIpytest9.0.3indirect
PyPIpytest-asyncio0.21.2indirect
PyPIpytest-cov7.1.0indirect
PyPIpytest-flakefinder1.1.0indirect
PyPIpytest-pretty1.3.0indirect
PyPIpytest-rerunfailures16.3indirect
PyPIpytest-timeout2.4.0indirect
PyPIpytest-xdist3.8.0indirect
PyPIpython-dotenv1.2.2indirect
PyPIpython-multipart0.0.32indirect
PyPIpywin32312indirect
PyPIpywin32-ctypes0.2.3indirect
PyPIpyyaml6.0.3indirect
PyPIreadme-renderer45.0indirect
PyPIreferencing0.37.0indirect
PyPIregex2026.5.9indirect
PyPIrequests2.34.2indirect
PyPIrequests-toolbelt1.0.0indirect
PyPIresponses0.26.1indirect
PyPIrfc3339-validator0.1.4indirect
PyPIrfc39862.0.0indirect
PyPIrich14.3.4indirect
PyPIrpds-py0.30.0indirect
PyPIrpds-py2026.5.1indirect
PyPIruff0.15.17indirect
PyPIs3transfer0.14.0indirect
PyPIsecretstorage3.5.0indirect
PyPIsetuptools81.0.0indirect
PyPIshellingham1.5.4indirect
PyPIsix1.17.0indirect
PyPIslack-bolt1.28.0indirect
PyPIslack-sdk3.42.0indirect
PyPIsniffio1.3.1indirect
PyPIsnowballstemmer3.1.1indirect
PyPIsoupsieve2.8.4indirect
PyPIsse-starlette3.4.4indirect
PyPIstarlette1.3.1indirect
PyPIstrands-agents1.43.0indirect
PyPIstrands-agents-tools0.8.0indirect
PyPIsympy1.14.0indirect
PyPItemporalio1.30.0indirect
PyPItenacity9.1.4indirect
PyPItiktoken0.13.0indirect
PyPItokenizers0.23.1indirect
PyPItoml0.10.2indirect
PyPItomli2.4.1indirect
PyPItqdm4.68.2indirect
PyPItwine4.0.2indirect
PyPItwisted26.4.0indirect
PyPItyper0.25.1indirect
PyPItypes-aioboto315.5.0indirect
PyPItypes-aiobotocore3.7.0indirect
PyPItypes-aiobotocore-s32.25.2indirect
PyPItypes-awscrt0.34.1indirect
PyPItypes-s3transfer0.16.0indirect
PyPItyping-inspection0.4.2indirect
PyPItzdata2026.2indirect
PyPItzlocal5.4indirect
PyPIurllib32.7.0indirect
PyPIuuid-utils0.16.0indirect
PyPIuvicorn0.49.0indirect
PyPIwatchdog6.0.0indirect
PyPIwcwidth0.8.1indirect
PyPIwebsockets15.0.1indirect
PyPIwerkzeug3.1.8indirect
PyPIwrapt1.17.3indirect
PyPIxmltodict1.0.4indirect
PyPIxxhash3.7.0indirect
PyPIyarl1.24.2indirect
PyPIzipp4.1.0indirect
PyPIzope-interface8.5indirect
PyPIzstandard0.25.0indirect
Raw JSON report machine-readable

Feedback

Spotted something off in this report, or have thoughts to share? Wrong measurements, missed tooling, ideas, questions — anything is welcome. Every message is read and gets a response.

The message is kept through sign-in.

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.10.0, schema v0.12.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsPyPI.