Публічний реєстрПомірний
Звіт про здоров'я програмного забезпеченнясхема 0.26.0 · метрики 1.13.0 · 2026-07-21 23:16 UTC
pypa / pyproject-hooks
A low-level library for calling build-backends in `pyproject.toml`-based project
pypa/pyproject-hooks має індекс здоров’я 64 зі 100, що відповідає смузі «Помірний». Найвищий показник — Engineering Quality (90/100), найнижчий — Vitality (29/100). Останнє оновлення було 107 днів тому. Більшість нещодавньої роботи виконують 2 учасники.
64
загалом / 100Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
64
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Власність
Python Packaging AuthorityОрганізація
2 375 підписників59 публічних репозиторіївз бер. 2011 р.
За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.
Пакетні екосистеми
| Реєстр | Пакет | Версія | Завантажень / міс | Версії | Остання публікація |
|---|---|---|---|---|---|
| PyPI | pyproject_hooks | 1.2.0 | - | 4 | 660 днів тому |
Метрики за категоріями
Життєздатність
Чи живий проєкт — чи пишеться код і чи виходять релізи?
29
Активність розробки
22Критичний
Як обчислюється оцінка
| 9.9/36 | Свіжість push — останній push 107 дн. тому |
| 2.8/36 | Ритм комітів — 4/52 тижнів із комітами |
| 9/18 | Обсяг комітів — 9 комітів за останній рік |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0 |
Використані вхідні дані
| commits_last_year | 9 |
| human_commit_share | 1 |
| days_since_last_push | 107 |
| active_weeks_last_year | 4 |
Дисципліна релізів
40У зоні ризику
Як обчислюється оцінка
| 16.2/27 | Випускає релізи — 18 тегів версій (без релізів GitHub) |
| 7.2/36 | Свіжість релізів — останній реліз 660 дн. тому |
| 12.6/27 | Ритм релізів — реліз кожні ~160,2 дн. |
| 0/10 | OpenSSF Scorecard: Signed-Releases — немає даних |
Використані вхідні дані
| releases_count | 18 |
| latest_release_tag | v1.2.0 |
| releases_from_tags | так |
| days_since_latest_release | 660 |
| mean_days_between_releases | 160,2 |
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.
Спільнота та впровадження
Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?
60
Популярність і впровадження
55Помірний
Як обчислюється оцінка
| 34.1/60 | Зірки — 128 зірок |
| 14.6/25 | Форки — 58 форків |
| 6/15 | Спостерігачі — 13 спостерігачів |
Використані вхідні дані
| forks | 58 |
| stars | 128 |
| watchers | 13 |
| growth_state | organic |
| growth_factor_pct | 100 |
Здоров'я спільноти
65Помірний
Як обчислюється оцінка
| 22.5/22.5 | README |
| 22.5/22.5 | Ліцензія — визнана ліцензія (MIT) |
| 0/18 | Настанови CONTRIBUTING |
| 13.5/13.5 | Кодекс поведінки |
| 0/7.2 | Шаблон issue |
| 0/6.3 | Шаблон PR |
Використані вхідні дані
| has_readme | так |
| has_license | так |
| has_contributing | ні |
| has_issue_template | ні |
| has_code_of_conduct | так |
| has_pull_request_template | ні |
Сталість та врядування
Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?
74
Стійкість мейнтейнерів (бас-фактор)
62Помірний
Як обчислюється оцінка
| 25.2/54 | Бас-фактор — на 2 контриб’ютор(ів) припадає половина всіх комітів |
| 13.2/22.5 | Розподіл комітів — головний контриб’ютор — автор 41% комітів |
| 13.5/13.5 | Широта контриб’юторів — 32 контриб’юторів |
| 10/10 | OpenSSF Scorecard: Contributors — project has 84 contributing companies or organizations |
Використані вхідні дані
| bus_factor | 2 |
| contributors_sampled | 32 |
| top_contributor_share | 0,412 |
Реактивність на issue та PR
85Відмінний
Як обчислюється оцінка
| 41.7/46.8 | Вирішення issue — закрито 89% issue |
| 31.7/38.3 | Прийняття PR — злито 102/123 вирішених PR |
| 12/15 | OpenSSF Scorecard: Code-Review — Found 11/13 approved changesets -- score normalized to 8 |
Використані вхідні дані
| merged_prs | 102 |
| open_issues | 11 |
| closed_issues | 90 |
| issue_closed_ratio | 0,891 |
| closed_unmerged_prs | 21 |
Власність та опіка
79Добрий
Як обчислюється оцінка
| 30/30 | Підтримка власника — у власності організації |
| 0/20 | Верифікований домен |
| 24.3/25 | Охоплення власника — 2 375 підписників у pypa |
| 24.9/25 | Послужний список — 59 публічних репозиторіїв, вік облікового запису ~15 р. |
Використані вхідні дані
| followers | 2 375 |
| owner_type | Organization |
| is_verified | — |
| owner_login | pypa |
| public_repos | 59 |
| account_age_days | 5 620 |
Супровід пакетів
71Добрий
Як обчислюється оцінка
| 25/25 | Опубліковано й доступно — 1 пакет(ів) у pypi |
| 14/35 | Свіжість публікацій — остання публікація 660 дн. тому |
| 12/20 | Історія версій — 4 опублікованих версій |
| 20/20 | Не застарілий — активний, не deprecated і не yanked |
Використані вхідні дані
| packages | pyproject_hooks |
| ecosystems | pypi |
| any_deprecated | ні |
| min_days_since_publish | 660 |
Інженерна якість
Чи наявні базові інженерні практики та документація?
90
Інженерні практики
84Добрий
Як обчислюється оцінка
| 24/24 | Процеси CI — 1 процес(ів) CI |
| 24/24 | Наявні тести |
| 16/16 | Конфігурація лінтера |
| 9.6/9.6 | Pre-commit-хуки |
| 0/6.4 | .editorconfig |
| 10/20 | OpenSSF Scorecard: CI-Tests — 7 out of 13 merged PRs checked by a CI test -- score normalized to 5 |
Використані вхідні дані
| has_ci | так |
| has_tests | так |
| has_editorconfig | ні |
| has_linter_config | так |
| has_precommit_config | так |
Документація
100Відмінний
Як обчислюється оцінка
| 30/30 | README |
| 25/25 | Каталог документації |
| 15/15 | Сайт документації / домашня сторінка — https://pyproject-hooks.readthedocs.io/ |
| 10/10 | Опис репозиторію |
| 10/10 | Теми — 2 тем |
| 10/10 | Wiki |
Використані вхідні дані
| topics | python, packaging |
| has_wiki | так |
| homepage | https://pyproject-hooks.readthedocs.io/ |
| has_readme | так |
| has_docs_dir | так |
| has_description | так |
Безпека
Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?
67
Стан безпеки
59Помірний
Як обчислюється оцінка
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — немає даних |
| 1.2/2.5 | CI-Tests — 7 out of 13 merged PRs checked by a CI test -- score normalized to 5 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 6/7.5 | Code-Review — Found 11/13 approved changesets -- score normalized to 8 |
| 2.5/2.5 | Contributors — project has 84 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Ліцензія — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0 |
| 5/5 | Packaging — packaging workflow detected |
| 3/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — немає даних |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Використані вхідні дані
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 5,9 |
Виключено з оцінювання (немає даних або не застосовно): branch_protection, signed_releases. Залишкові ваги перенормовано.
Сповіщення про залежності
100Відмінний
Як обчислюється оцінка
| 35/35 | Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень |
| 0/25 | Непрямі залежності без відомих сповіщень — транзитивний набір не відокремлюється від залежностей розробки й тестування в цьому обсязі |
| 0/40 | Немає задавнених сповіщень — жодне сповіщення не має дати публікації |
Використані вхідні дані
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 3 |
| unassessed_packages | 8 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Виключено з оцінювання (немає даних або не застосовно): Непрямі залежності без відомих сповіщень, Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено 3 резолвлених залежностей із OSV. 8 не вдалося оцінити — немає резолвленої версії, непідтримувана екосистема або поза межами звітованого переліку пакетів. Цей репозиторій не публікує пакета, який резолвить індекс, тож натомість оцінено граф залежностей репозиторію. Цей граф змішує закріплені версії для розробки й тестування зі справді постачаними залежностями, тож оцінюються лише задекларовані runtime-залежності; транзитивні знахідки подаються як контекст і в оцінку не входять. Досяжність не аналізується.
Готовність до ШІ
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
52
Контекст і настанови для агентів
23Критичний
Як обчислюється оцінка
| 0/45 | Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора |
| 0/15 | Машиночитана документація (llms.txt) |
| 22.9/40 | Читабельна історія комітів — намір зазначено у 43 з 100 людських комітів (структурований заголовок або пояснювальний текст) |
Використані вхідні дані
| has_llms_txt | ні |
| legible_history_share | 0,43 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Як обчислюється оцінка
| 18/18 | Розгортання однією командою — noxfile.py |
| 22/22 | Автоматизовані тести |
| 11/11 | Конфігурація лінтера / форматера |
| 11/11 | Статична перевірка типів — src/pyproject_hooks/py.typed |
| 0/10 | Відтворюване середовище |
| 0/10 | Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом |
| 0/8 | Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено |
| 6/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6 |
Використані вхідні дані
| has_nix | ні |
| has_tests | так |
| lockfiles | — |
| has_dockerfile | ні |
| typed_language | ні |
| bootstrap_files | noxfile.py |
| has_devcontainer | ні |
| has_linter_config | так |
| typecheck_configs | src/pyproject_hooks/py.typed |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Читабельність коду для моделей
82Добрий
Як обчислюється оцінка
| 27/45 | Типізований код — Python з конфігурацією перевірки типів (src/pyproject_hooks/py.typed) |
| 55/55 | Керовані розміри файлів — 0/26 файлів вихідного коду понад 60 КБ |
Використані вхідні дані
| primary_language | Python |
| largest_source_bytes | 15 456 |
| source_files_sampled | 26 |
| oversized_source_files | 0 |
Машиночитні інтерфейси
40У зоні ризику
Як обчислюється оцінка
| 0/40 | Схема API (OpenAPI/GraphQL/proto) |
| 0/20 | Сервер MCP |
| 40/40 | Придатні до запуску приклади — samples |
Використані вхідні дані
| example_dirs | samples |
| has_mcp_signal | ні |
| api_schema_files | — |
Ключові факти
128зірок GitHub
32контриб'юторів
9комітів за останні 12 місяців
107днів від останнього пушу
18релізів
2бас-фактор
11відкритих issue
PyPIпакетних екосистем
Докладніше
Історія зірок і форків 128 ★ / 58 ⇿
128Зірки
58Форки
18Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 1Мінорні 12Патчі 5
Кожна точка охоплює 9 днів.
OpenSSF Scorecard 5.9 / 10
5.9сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).
| 10 | Binary-Artifacts | no binaries found in the repo |
| н/д | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 5 | CI-Tests | 7 out of 13 merged PRs checked by a CI test -- score normalized to 5 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 8 | Code-Review | Found 11/13 approved changesets -- score normalized to 8 |
| 10 | Contributors | project has 84 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0 |
| 10 | Packaging | packaging workflow detected |
| 6 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 6 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| н/д | Signed-Releases | no releases found |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Усі залежності 11
Повний розв'язаний набір залежностей із графа залежностей GitHub: 0 прямих і 11 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
| Реєстр | Пакет | Версія | Зв'язок |
|---|---|---|---|
| PyPI | build | 1.4.2 | непряма |
| PyPI | flake8 | — | непряма |
| PyPI | furo | — | непряма |
| PyPI | packaging | 26.0 | непряма |
| PyPI | pyproject-hooks | 1.2.0 | непряма |
| PyPI | pytest | — | непряма |
| PyPI | setuptools | — | непряма |
| PyPI | sphinx | — | непряма |
| PyPI | sphinx-issues | — | непряма |
| PyPI | testpath | — | непряма |
| PyPI | tomli | — | непряма |
Сповіщення про залежності 0
Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 3 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 0 мають відомі сповіщення, з них 0 прямі. 8 не вдалося оцінити — немає резолвленої версії, непідтримувана екосистема або поза наведеним переліком пакетів.
Жодне відоме сповіщення не стосується оцінених залежностей.
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [
"python",
"packaging"
],
"is_fork": false,
"size_kb": 370,
"has_wiki": true,
"homepage": "https://pyproject-hooks.readthedocs.io/",
"languages": {
"Python": 50670
},
"pushed_at": "2026-04-05T19:03:53Z",
"created_at": "2017-07-13T13:06:18Z",
"owner_type": "Organization",
"updated_at": "2026-06-30T16:36:16Z",
"description": "A low-level library for calling build-backends in `pyproject.toml`-based project",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": "https://www.pypa.io",
"name": "Python Packaging Authority",
"type": "Organization",
"login": "pypa",
"company": null,
"location": "United States of America",
"followers": 2375,
"avatar_url": "https://avatars.githubusercontent.com/u/647025?v=4",
"created_at": "2011-03-02T14:17:18Z",
"is_verified": null,
"public_repos": 59,
"account_age_days": 5620
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2024-09-29T09:21:41Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2024-04-29T07:24:53Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2022-11-21T11:34:36Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2023-11-08T11:21:27Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2022-07-29T13:55:01Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2021-10-18T09:12:50Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2021-10-18T00:09:46Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2021-07-18T17:57:58Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2021-03-11T17:12:31Z"
},
{
"tag": "v0.9.1",
"kind": "patch",
"published_at": "2020-10-18T20:37:33Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2020-10-18T20:20:52Z"
},
{
"tag": "v0.8.2",
"kind": "patch",
"published_at": "2020-04-01T21:05:41Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2019-11-23T12:46:39Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2019-11-23T12:41:05Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2019-09-27T11:15:04Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2019-08-06T10:41:04Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2018-12-17T17:15:11Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2018-12-17T15:56:31Z"
}
],
"recent_commits": [
{
"oid": "d9ee8a0fe9f1fe351187ff85965a8b8fcb7e78a6",
"body": "Pin GitHub Actions and Python packages",
"is_bot": false,
"headline": "Merge pull request #225 from sethmlarson/pin-github-actions",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-04-05T19:03:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d1e7eeb419e5e22c31617ebc90841c599f1c539",
"body": null,
"is_bot": false,
"headline": "Pin GitHub Actions and Python packages",
"author_name": "Seth Michael Larson",
"author_login": "sethmlarson",
"committed_at": "2026-03-27T20:18:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aabadf528d142aa0e246ad9a823178f86b62d3e4",
"body": "chore: use subprocess.run instead of old check_*",
"is_bot": false,
"headline": "Merge pull request #210 from henryiii/henryiii/chore/subprocess.run",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-02-19T12:45:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f11cee2082861fdcd4cbf15a357c8699b754b250",
"body": "Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com>",
"is_bot": false,
"headline": "chore: add a note about the exception object having the output",
"author_name": "Henry Schreiner",
"author_login": "henryiii",
"committed_at": "2026-02-18T21:39:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61d5792a8d8ac74683cb9bd60ed6a63b5a1acef1",
"body": "Co-authored-by: Pradyun Gedam <pradyunsg@gmail.com>",
"is_bot": false,
"headline": "Apply suggestions from code review",
"author_name": "Henry Schreiner",
"author_login": "henryiii",
"committed_at": "2026-02-18T21:37:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfbe5386bfea0c5cffcb53be77eff9c75eaa36e2",
"body": "Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com>",
"is_bot": false,
"headline": "chore: use subprocess.run instead of old check_*",
"author_name": "Henry Schreiner",
"author_login": "henryiii",
"committed_at": "2026-02-18T21:37:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3de7fad37912a8bae56804869bddd1a2860beaa8",
"body": "Fix find_distributions with non-empty context",
"is_bot": false,
"headline": "Merge pull request #212 from kulikjak/fix-find_distributions",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-02-18T15:37:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51e84d783ff52d2cda07a895163eb589d2b0be7b",
"body": "Show traceback from output.json on BackendUnavailable",
"is_bot": false,
"headline": "Merge pull request #219 from bbhtt/bbhtt/show-traceback-outputjson",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-02-18T15:35:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38cb960966cb885616d7d754cbe9f2e4fe916929",
"body": null,
"is_bot": false,
"headline": "add test for find_distributions",
"author_name": "Jakub Kulík",
"author_login": "kulikjak",
"committed_at": "2026-02-18T15:29:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f1a2b59cf126c74e567759a03f251708bf730c4",
"body": "Co-authored-by: Anderson Bravalheri <andersonbravalheri+github@gmail.com>",
"is_bot": false,
"headline": "Update src/pyproject_hooks/_in_process/_in_process.py",
"author_name": "Jakub Kulík",
"author_login": "kulikjak",
"committed_at": "2026-02-18T15:29:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcc58b70689d92911aab58f1e7bd587cf63aec9c",
"body": null,
"is_bot": false,
"headline": "Fix find_distributions with non-empty context",
"author_name": "Jakub Kulík",
"author_login": "kulikjak",
"committed_at": "2026-02-18T15:29:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "763714a4f8e8f2ad7a9bdd2863aee6ddadc0832b",
"body": "Fixes https://github.com/pypa/pyproject-hooks/issues/217",
"is_bot": false,
"headline": "Show traceback from output.json on BackendUnavailable",
"author_name": "bbhtt",
"author_login": "bbhtt",
"committed_at": "2026-02-18T15:09:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9af158351225de24ae04f9bb06695447baf20e0",
"body": "Switch license metadata to the PEP 639 format",
"is_bot": false,
"headline": "Merge pull request #220 from SpecLad/pep-639",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-02-18T15:06:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f52595a9ee3640bc6e04c0c39e44315b4a7d7d48",
"body": "License classifiers and the table form of `license` are now deprecated.",
"is_bot": false,
"headline": "Switch license metadata to the PEP 639 format",
"author_name": "Roman Donchenko",
"author_login": "SpecLad",
"committed_at": "2026-02-18T14:54:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b1fe0a86528ac54718c31485b1c3f8199fa1d4c",
"body": "Use os.path.commonpath() instead of commonprefix()",
"is_bot": false,
"headline": "Merge pull request #222 from sethmlarson/patch-2",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2026-02-18T13:18:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f230da76573e32003cf42746b32821f32b0beda6",
"body": null,
"is_bot": false,
"headline": "Use os.path.commonpath() instead of commonprefix()",
"author_name": "Seth Michael Larson",
"author_login": "sethmlarson",
"committed_at": "2026-02-03T19:43:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10093cd5bc488c6ffbb4dfa034f54c7ac1e3178e",
"body": "feat: use `sphinx-issues` for linking",
"is_bot": false,
"headline": "Merge pull request #218 from shenxianpeng/update-docs",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2025-06-07T16:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70cabb0bb8d656afae7b245f0f7201de2865964b",
"body": null,
"is_bot": false,
"headline": "remove extlinks ext and fix ci failure",
"author_name": "shenxianpeng",
"author_login": "shenxianpeng",
"committed_at": "2025-06-07T15:43:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8566150b9a9e88876a7b7321a6314eebff7cdd01",
"body": null,
"is_bot": false,
"headline": "use sphinx-issues to align with other pypa projects",
"author_name": "shenxianpeng",
"author_login": "shenxianpeng",
"committed_at": "2025-06-03T08:53:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "717d01f19ca383be263a4424b9dafc895fb73cd8",
"body": null,
"is_bot": false,
"headline": "fix: update conf.py and clanglog.rst",
"author_name": "shenxianpeng",
"author_login": "shenxianpeng",
"committed_at": "2025-06-03T08:19:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eac4e3c72e9b071e723c7407dee4d4107b9435ff",
"body": null,
"is_bot": false,
"headline": "feat: add extlinks for issue and pull",
"author_name": "shenxianpeng",
"author_login": "shenxianpeng",
"committed_at": "2025-06-03T07:14:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e89c52f8e277f3a83cb959c278f546669dd3bdbb",
"body": "`prepare_metadata_for_build_wheel` was initially typed to return\nOptional[str] just like the editable metadata hook, but it got changed\nto `str` during review. However, the editable hook's return type was\nnever corrected. This seems to be an oversight as I can't find anything\nin the PEP 517 or 660 specifications allowing these hooks to return\nNone.\n\nCo-authored-by: Pradyun Gedam <pradyunsg@gmail.com>",
"is_bot": false,
"headline": "Correct editable metadata hook return type to str (#209)",
"author_name": "Richard Si",
"author_login": "ichard26",
"committed_at": "2025-04-13T00:22:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc02fcb33e04fed7108dd29e5056775e692f06cb",
"body": "This makes it possible for build-frontends to surface this information\nto end users.\n\n---------\n\nCo-authored-by: Pradyun Gedam <pgedam@bloomberg.net>\nCo-authored-by: Pradyun Gedam <pradyunsg@gmail.com>",
"is_bot": false,
"headline": "Forward warnings from build-backend to build-frontend (#213)",
"author_name": "Damian Shaw",
"author_login": "notatallshaw",
"committed_at": "2025-04-13T00:13:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21478a7ae4a27a228c173043817f10efe2b54779",
"body": null,
"is_bot": false,
"headline": "Remove Python 3.7 support, add Python 3.13 support (#214)",
"author_name": "Damian Shaw",
"author_login": "notatallshaw",
"committed_at": "2025-04-13T00:09:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b7c6d113fb89b755d762a88712c8a6873cddd47",
"body": "Prepare to release 1.2",
"is_bot": false,
"headline": "Merge pull request #205 from pypa/prepare-1.2",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T09:21:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "102747081953a43bcbb9304e6319de3bf2166bfc",
"body": null,
"is_bot": false,
"headline": "Bump version: 1.1.0 → 1.2.0",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T09:18:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dabe52eac18ef677af262657c97a7689b20fa909",
"body": null,
"is_bot": false,
"headline": "Prepare release notes for 1.2",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T09:18:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3df91751cb87c01b1fd2584a37ca3c186f126a48",
"body": "Relax test for build requirements from setuptools",
"is_bot": false,
"headline": "Merge pull request #204 from pypa/fix/setuptools-71",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T09:08:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9efaa97258b63108750539e440789a5cada90fd8",
"body": null,
"is_bot": false,
"headline": "Relax test for build requirements from setuptools",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T09:04:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b57973c3a8ef919dffecac8d15fd608fc51a271",
"body": "Improve interop with `importlib.metadata`: variation without `importlib_metadata`",
"is_bot": false,
"headline": "Merge pull request #199 from abravalheri/issue-192-take2",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-09-29T08:59:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9988edd23921cdf74bed88f7ae1397b1c440f385",
"body": "Ensure tests, docs, license etc. are included in sdist",
"is_bot": false,
"headline": "Merge pull request #196 from pypa/sdist-includes",
"author_name": "Jason R. Coombs",
"author_login": "jaraco",
"committed_at": "2024-07-02T17:43:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dba181736a41503f81ed73434143db7537494c76",
"body": null,
"is_bot": false,
"headline": "Always use importlib.metadata",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-02T11:14:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d68f4d94477f0c20f900b1520ef1a1193e9d4f9d",
"body": null,
"is_bot": false,
"headline": "Remove unused dev-dependency",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-01T15:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "455b77f9a89f3bfded5925ccc15e17d20c9b99cd",
"body": null,
"is_bot": false,
"headline": "Account for importlib_metadata in Python<3.7",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-01T15:27:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca5c5a522720a9c7b672a5a215fbfe6fa05caf77",
"body": null,
"is_bot": false,
"headline": "Use pytest.importorskip for importlib.metadata",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-01T15:21:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "282b8735e59df938a210e46b8cd5cd1d99344816",
"body": null,
"is_bot": false,
"headline": "Implement find_distributions for _BackendPathFinder",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-01T15:17:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff71ab62909d3d4305f16f20933173a579f7ebbc",
"body": null,
"is_bot": false,
"headline": "Add test capturing expectation about importlib.metadata",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2024-05-01T15:17:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "261e4d82121782d05f6fddfaded8b8a7493d0370",
"body": "Don't create tag automatically on bumping version number",
"is_bot": false,
"headline": "Merge pull request #197 from pypa/bumpversion-no-tag",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-05-01T06:40:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f18842e40a651386b70a49955e3dc69777d64b8",
"body": "chore: make pre-commit faster",
"is_bot": false,
"headline": "Merge pull request #198 from henryiii/patch-2",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-05-01T06:39:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64fd514e06f371a8cfe7b990fd6a6777d0f2e424",
"body": null,
"is_bot": false,
"headline": "chore: make pre-commit faster",
"author_name": "Henry Schreiner",
"author_login": "henryiii",
"committed_at": "2024-04-30T21:19:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e2183de57527e5c8533cf0fd8b5b927f829349e",
"body": null,
"is_bot": false,
"headline": "Don't create tag automatically on bumping version number",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-30T21:13:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "520a738cd183028f98f254e0294c96a687845dd6",
"body": "chore: ruff moved to astral-sh",
"is_bot": false,
"headline": "Merge pull request #172 from henryiii/patch-1",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-30T21:09:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e962d26ff15175416a7ea02517a75f65676d437b",
"body": null,
"is_bot": false,
"headline": "Update pre-commit hook versions",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-30T21:04:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "230169e344a9cd014e40a9aa00e1deabb9617a51",
"body": null,
"is_bot": false,
"headline": "chore: ruff moved to astral-sh",
"author_name": "Henry Schreiner",
"author_login": "henryiii",
"committed_at": "2024-04-30T21:03:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfb13356a4a4bb24ae7060a45362d3b4d52ef0bf",
"body": null,
"is_bot": false,
"headline": "Ensure tests, docs, license etc. are included in sdist",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-30T20:46:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e0dbe471dbf922097c30b315410f87f37217a01",
"body": "Fix path pollution again",
"is_bot": false,
"headline": "Merge pull request #193 from pradyunsg/fix-path-pollution-properly",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-30T20:25:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f71a8f5399859a9a989c51cd13a456f21f98d947",
"body": null,
"is_bot": false,
"headline": "Fix path pollution again",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2024-04-29T21:44:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a72a084b1f6cf64aa4be49aa1e971511cc5659",
"body": "CI: Update Github checkout & setup-python actions",
"is_bot": false,
"headline": "Merge pull request #190 from pypa/gha-updates",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-29T07:35:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c25acc30aeb135928df38dd0ddb22bccd02ee22e",
"body": null,
"is_bot": false,
"headline": "CI: Update Github checkout & setup-python actions",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-29T07:31:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "903ad919c7857a7321dee080e708e13afb2bd4d5",
"body": "Exclude Mac + Python 3.7 from CI matrix",
"is_bot": false,
"headline": "Merge pull request #189 from pypa/ci-rm-mac-py37",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-29T07:24:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a22b3e052ca8c9ae10445aba20d784ab7aeb63a",
"body": null,
"is_bot": false,
"headline": "Exclude Mac + Python 3.7 from CI matrix",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-29T07:21:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d79646fcac2f888a91e2ea9e17cceec19d9a2b24",
"body": "Prepare v1.1",
"is_bot": false,
"headline": "Merge pull request #188 from pypa/prepare-1.1",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-29T07:10:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7de0160e5ab3a82d2be393781577736096d6f29e",
"body": null,
"is_bot": false,
"headline": "Bump version: 1.0.0 → 1.1.0",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-24T17:37:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd15b2a55f4e1a0aa858d6195e07ecf6d6ac44cb",
"body": null,
"is_bot": false,
"headline": "Mention backend-path changes in changelog",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-24T17:35:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "debf816af9373232fbf79f1efdf37320d2e0853c",
"body": null,
"is_bot": false,
"headline": "Add back BackendInvalid as a synonym for BackendUnavailable",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-24T17:35:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c667aeb10e7d6805aed53c95e9727c3ccbaad40e",
"body": "Set up trusted publishing for making releases to PyPI",
"is_bot": false,
"headline": "Merge pull request #187 from pypa/gha-trusted-publish",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-23T08:30:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79a2edf4a3d40c842cb7916bf6622981be1751de",
"body": null,
"is_bot": false,
"headline": "Remove trailing space",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-20T16:02:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f66e6a11097c477aeb08ad5e08c01a5c8823bfda",
"body": null,
"is_bot": false,
"headline": "Specify environment for publishing job",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-20T15:59:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1248ac2f0526291771f2cab520cf82ee6323a7ca",
"body": null,
"is_bot": false,
"headline": "Set up trusted publishing for making releases to PyPI",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-04-20T15:49:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33953f25fd2f89eb11dd21172d78d398930da1c7",
"body": "Export `SubprocessRunner`",
"is_bot": false,
"headline": "Merge pull request #184 from layday/export-subprocess-runner",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2024-03-03T10:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "773b0635b6a13ca2b62a50eedec5cd31bd6f6b32",
"body": null,
"is_bot": false,
"headline": "Fix star import",
"author_name": "layday",
"author_login": "layday",
"committed_at": "2024-03-02T12:32:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1926fb2f276b4b4d9788acc9a855b024caf92ab5",
"body": "mypy in strict mode will complain that `SubprocessRunner`\nis not defined if it is not explicitly exported.",
"is_bot": false,
"headline": "Export `SubprocessRunner`",
"author_name": "layday",
"author_login": "layday",
"committed_at": "2024-02-27T19:29:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "649925ea9bae3c0590453eb64d0503000ebae58b",
"body": "Update RTD config to (hopefully) fix docs builds",
"is_bot": false,
"headline": "Merge pull request #180 from pypa/takluyver-patch-1",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2023-11-03T10:25:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "292242fd9ece1bb397689a6d1a9084d4a66c345a",
"body": null,
"is_bot": false,
"headline": "Update RTD config to (hopefully) fix docs builds",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2023-11-01T08:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b036b5acf219f980147a30652d9b53077a6e081",
"body": "Type annotate the public API",
"is_bot": false,
"headline": "Merge pull request #167 from pradyunsg/typing",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-11-01T06:24:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1eea736db62fbc95a9b36881141886064672fda3",
"body": null,
"is_bot": false,
"headline": "Remove whitespace that was accidentally added in a merge commit",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-11-01T06:17:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47a33475d85d3c0a2d14ad5657c27ac0c2b6d1a1",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into typing",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-10-31T20:53:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "084b02e8970c8e1f5e72080bdde548108aa1d111",
"body": "* Test backend is loaded from backend-path\r\n\r\n* Actively import from backend-path instead of checking\r\n\r\nPreviously `_in_process` would only modify `sys.path`, use\r\n`importlib.import_module` and hope the backend is loaded from the right\r\npath.\r\n\r\nThis would lead to misleading error messages in some \n[…]\nnvalid as no longer used/deprecated\r\n\r\n* Remove unused BackendInvalid\r\n\r\n* Test nested intree backend\r\n\r\n* Add negative tests for nested intree backends\r\n\r\n* Avoid passing nested modules to PathFinder",
"is_bot": false,
"headline": "Improve backend loading from `backend-path` (#165)",
"author_name": "Anderson Bravalheri",
"author_login": "abravalheri",
"committed_at": "2023-08-19T00:25:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3456dd9342b80ead9ad46cf2e37f0ecfb59e9ce",
"body": "Reduce concurrent CI runs",
"is_bot": false,
"headline": "Merge pull request #169 from pradyunsg/concurrency",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2023-04-08T14:36:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf12ccea272078bf02758b3e2a251742bd8dd0de",
"body": null,
"is_bot": false,
"headline": "Reduce concurrent CI runs",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T14:00:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "228aef1c51a3afb4a582ee005e972a01ea31ef39",
"body": null,
"is_bot": false,
"headline": "Document the usage of the subprocess protocol for type checking",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:53:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "375b8fc4606e1cf404017a267ffa89677db7a6f2",
"body": null,
"is_bot": false,
"headline": "Don't meddle with `__all__`",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:50:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c83df5dc968748a7975067bca97934b215362dc",
"body": "This makes it possible to annotate using this type, instead of relying\non redefining it.",
"is_bot": false,
"headline": "Expose `SubprocessRunner` for type checking",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:48:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db5ed31e935be57cda0d99e339e7157343cded87",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into typing",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:45:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12401f6951d11fce011945aca73cbdbe562fa663",
"body": null,
"is_bot": false,
"headline": "Fully document all parameters in the public API",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:44:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cffda1f8bca50ffab5ed0d9d71cd48640a828dc7",
"body": null,
"is_bot": false,
"headline": "Don't set an incorrect name on `nox -s release`",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:22:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1017004c9aea20c61cffa5e454bb454fb4930f28",
"body": "This information is now coming from the source code directly.",
"is_bot": false,
"headline": "Drop the return types from docstrings",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:21:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b264f595634e9156f4779ac5c96d2bb06213b5f",
"body": null,
"is_bot": false,
"headline": "Use the correct directory for documentation gitignore",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:18:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96a6691e8e19c5a6c24e4ac152e4839a0a9350aa",
"body": null,
"is_bot": false,
"headline": "Correct the type of `prepare_metadata_for_build_wheel`",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:14:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58e28143329c878cecd397c281543f1b3630267b",
"body": null,
"is_bot": false,
"headline": "Use more generic types in type annotations",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:12:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26460ba7a825320f620867e966708bb8d4ac7826",
"body": null,
"is_bot": false,
"headline": "Add a `py.typed` file to denote type annotated sources",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:09:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cf1649a071f4268578b0e7417eb017637c4a486",
"body": "This reverts commit 69ed8b1dac92e33d6a2d18c1b3a3cfad57020d90.",
"is_bot": false,
"headline": "Revert \"Drop support for Python 3.7\"",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-08T13:09:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3b5288e1c7cb959164f54042888ba35ba6e9033",
"body": "Rename various pieces to match the new project name",
"is_bot": false,
"headline": "Merge pull request #166 from pradyunsg/rename-env-var",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2023-04-08T12:56:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a2adbf217a2c1f03e41210e38c075780c2bc534",
"body": null,
"is_bot": false,
"headline": "Add changelog entry for type annotations",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:17:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87c779b41f033329181a39ea8a29485a4d9aa24a",
"body": "This ensures that the documentation build uses a well-defined Python\nversion, rather than whatever happens to be the default for the\nenvironment.",
"is_bot": false,
"headline": "Enforce a Python version in Read the Docs builds",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:10:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2cd373a66926d8d5e472a2aca14200b520efbc9",
"body": null,
"is_bot": false,
"headline": "Add support for Python 3.12",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:03:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69ed8b1dac92e33d6a2d18c1b3a3cfad57020d90",
"body": "This enables the use of newer Python typing functionality without\ncompatibility shims.",
"is_bot": false,
"headline": "Drop support for Python 3.7",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:03:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88906ab623d221f050481e9ac800da977adb643b",
"body": "This makes it behave better with newer ruff versions, and removes\nthe unused isort configuration.",
"is_bot": false,
"headline": "Update configuration for `ruff`",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:03:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb566f5ec133a2231174ca09f57a34f7f0fb664b",
"body": "This makes it easier for tools to provide completion and enhances the\ndocumentation of the API.",
"is_bot": false,
"headline": "Type annotate the public API",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:03:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62fb515f46f9c5d027db0326af67f7042542bfa7",
"body": null,
"is_bot": false,
"headline": "Add changelog section for next release",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-07T10:03:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c074f9ea383f92ccd570caa32542145f8dea077e",
"body": "This ensures that we have a clearer name that doesn't require an\nexternal-to-codebase reference to understand.",
"is_bot": false,
"headline": "Rename the test for path pollution",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-03T16:15:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1b3e545204e6b2869cf85f747dafbbfb71a5b35",
"body": "This aligns with the new project name.",
"is_bot": false,
"headline": "Rename the wheel-built marker file",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-03T14:37:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "465dc376a03329a58763a18c3263808fc1e8d7f9",
"body": "This aligns with the new project name. The underscore at the start of\nthe variable name to make it clear that it is a \"private\" variable that\nshould not be used outside of this project.",
"is_bot": false,
"headline": "Rename the environment variables to match the new project name",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-04-03T14:37:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56ae3eaa47ab2313fac61bf4b07ab6b5940da0ca",
"body": "Modernise the codebase with black, ruff, pre-commit and nox",
"is_bot": false,
"headline": "Merge pull request #163 from pradyunsg/modernize",
"author_name": "Thomas Kluyver",
"author_login": "takluyver",
"committed_at": "2023-02-06T15:50:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43e3f05cdb552520e9e9509ca91a9da7c9c2868a",
"body": null,
"is_bot": false,
"headline": "Ignore the black reformatting commit in git blames",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:20:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2def59940961d0893e834ba033572cd63502312d",
"body": null,
"is_bot": false,
"headline": "Trim the number of pre-commit-hooks",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae97661d7eb6fa61d6b19bbc853e49061ee95f76",
"body": null,
"is_bot": false,
"headline": "Switch from flake8 + isort to ruff",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74972d1ed9f59d0e876d654dfcb29a02ed564315",
"body": null,
"is_bot": false,
"headline": "Configure linters for blacken'd code",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1731550536179b1289db4b8ae01d1b3673162aae",
"body": "This ensures consistent code style within the project.",
"is_bot": false,
"headline": "Blacken the codebase",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fea3c004d8e7e732d7e307306f61796b618d3e4f",
"body": "This makes it more closely aligned with the development workflow for\npip.",
"is_bot": false,
"headline": "Replace tox with nox and modernize CI",
"author_name": "Pradyun Gedam",
"author_login": "pradyunsg",
"committed_at": "2023-02-06T14:19:47Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 18,
"commits_last_year": 9,
"latest_release_at": "2024-09-29T09:21:41Z",
"latest_release_tag": "v1.2.0",
"releases_from_tags": true,
"days_since_last_push": 107,
"active_weeks_last_year": 4,
"days_since_latest_release": 660,
"mean_days_between_releases": 160.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "pyproject_hooks",
"exists": true,
"license": null,
"keywords": [
"License :: OSI Approved :: MIT License",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3 :: Only"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/pyproject_hooks/",
"is_deprecated": false,
"latest_version": "1.2.0",
"repository_url": "https://github.com/pypa/pyproject-hooks",
"versions_count": 4,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2021-12-03T13:45:22.992320Z",
"latest_published_at": "2024-09-29T09:24:13.293934Z",
"latest_version_yanked": null,
"days_since_latest_publish": 660
}
]
},
"popularity": {
"forks": 58,
"stars": 128,
"watchers": 13,
"fork_history": {
"days": [
{
"date": "2018-07-21",
"count": 1
},
{
"date": "2018-09-11",
"count": 1
},
{
"date": "2019-02-01",
"count": 1
},
{
"date": "2019-07-10",
"count": 1
},
{
"date": "2019-08-16",
"count": 1
},
{
"date": "2019-09-14",
"count": 1
},
{
"date": "2019-11-13",
"count": 1
},
{
"date": "2020-04-14",
"count": 1
},
{
"date": "2020-04-25",
"count": 1
},
{
"date": "2020-07-10",
"count": 1
},
{
"date": "2020-08-01",
"count": 1
},
{
"date": "2020-09-15",
"count": 1
},
{
"date": "2020-11-23",
"count": 3
},
{
"date": "2021-01-28",
"count": 1
},
{
"date": "2021-01-31",
"count": 1
},
{
"date": "2021-03-10",
"count": 1
},
{
"date": "2021-05-28",
"count": 1
},
{
"date": "2021-06-11",
"count": 1
},
{
"date": "2021-07-30",
"count": 1
},
{
"date": "2021-10-06",
"count": 1
},
{
"date": "2021-11-23",
"count": 1
},
{
"date": "2021-12-03",
"count": 1
},
{
"date": "2022-01-10",
"count": 1
},
{
"date": "2022-05-31",
"count": 1
},
{
"date": "2022-06-15",
"count": 1
},
{
"date": "2022-06-28",
"count": 1
},
{
"date": "2022-09-11",
"count": 1
},
{
"date": "2022-10-17",
"count": 1
},
{
"date": "2022-10-31",
"count": 1
},
{
"date": "2023-02-22",
"count": 1
},
{
"date": "2023-02-28",
"count": 1
},
{
"date": "2023-03-01",
"count": 1
},
{
"date": "2023-04-26",
"count": 1
},
{
"date": "2023-07-03",
"count": 1
},
{
"date": "2023-08-02",
"count": 1
},
{
"date": "2023-08-24",
"count": 1
},
{
"date": "2023-10-26",
"count": 1
},
{
"date": "2023-11-01",
"count": 1
},
{
"date": "2024-02-14",
"count": 1
},
{
"date": "2024-02-27",
"count": 1
},
{
"date": "2024-06-07",
"count": 1
},
{
"date": "2024-06-20",
"count": 1
},
{
"date": "2024-06-26",
"count": 1
},
{
"date": "2024-09-19",
"count": 1
},
{
"date": "2024-12-26",
"count": 1
},
{
"date": "2025-03-20",
"count": 1
},
{
"date": "2025-04-10",
"count": 1
},
{
"date": "2025-04-12",
"count": 1
},
{
"date": "2025-04-25",
"count": 1
},
{
"date": "2025-11-28",
"count": 1
},
{
"date": "2026-01-30",
"count": 1
},
{
"date": "2026-02-16",
"count": 1
},
{
"date": "2026-03-09",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-07-03",
"count": 1
}
],
"complete": true,
"collected": 58,
"total_forks": 58
},
"star_history": {
"days": [
{
"date": "2017-07-13",
"count": 1
},
{
"date": "2017-08-28",
"count": 1
},
{
"date": "2018-05-12",
"count": 1
},
{
"date": "2018-08-01",
"count": 1
},
{
"date": "2018-08-21",
"count": 1
},
{
"date": "2018-08-30",
"count": 1
},
{
"date": "2018-10-13",
"count": 1
},
{
"date": "2018-12-30",
"count": 1
},
{
"date": "2019-01-14",
"count": 1
},
{
"date": "2019-02-11",
"count": 1
},
{
"date": "2019-02-22",
"count": 1
},
{
"date": "2019-03-20",
"count": 1
},
{
"date": "2019-03-30",
"count": 1
},
{
"date": "2019-04-26",
"count": 1
},
{
"date": "2019-05-13",
"count": 1
},
{
"date": "2019-06-09",
"count": 1
},
{
"date": "2019-07-21",
"count": 1
},
{
"date": "2019-08-14",
"count": 1
},
{
"date": "2019-08-17",
"count": 1
},
{
"date": "2019-10-25",
"count": 1
},
{
"date": "2019-11-13",
"count": 1
},
{
"date": "2019-11-14",
"count": 1
},
{
"date": "2019-11-25",
"count": 1
},
{
"date": "2020-01-06",
"count": 1
},
{
"date": "2020-02-03",
"count": 1
},
{
"date": "2020-02-14",
"count": 1
},
{
"date": "2020-02-20",
"count": 1
},
{
"date": "2020-03-13",
"count": 1
},
{
"date": "2020-04-01",
"count": 1
},
{
"date": "2020-04-02",
"count": 1
},
{
"date": "2020-04-03",
"count": 1
},
{
"date": "2020-04-19",
"count": 1
},
{
"date": "2020-05-03",
"count": 1
},
{
"date": "2020-05-19",
"count": 1
},
{
"date": "2020-06-08",
"count": 1
},
{
"date": "2020-07-21",
"count": 2
},
{
"date": "2020-08-01",
"count": 1
},
{
"date": "2020-08-03",
"count": 1
},
{
"date": "2020-08-18",
"count": 1
},
{
"date": "2020-09-20",
"count": 1
},
{
"date": "2020-10-04",
"count": 1
},
{
"date": "2020-10-08",
"count": 1
},
{
"date": "2020-10-29",
"count": 1
},
{
"date": "2020-11-13",
"count": 1
},
{
"date": "2020-11-17",
"count": 1
},
{
"date": "2020-11-24",
"count": 1
},
{
"date": "2020-12-15",
"count": 1
},
{
"date": "2021-01-11",
"count": 1
},
{
"date": "2021-01-29",
"count": 1
},
{
"date": "2021-01-31",
"count": 1
},
{
"date": "2021-03-02",
"count": 1
},
{
"date": "2021-03-10",
"count": 1
},
{
"date": "2021-03-15",
"count": 1
},
{
"date": "2021-03-23",
"count": 1
},
{
"date": "2021-03-26",
"count": 1
},
{
"date": "2021-04-29",
"count": 1
},
{
"date": "2021-07-15",
"count": 1
},
{
"date": "2021-07-17",
"count": 1
},
{
"date": "2021-07-30",
"count": 1
},
{
"date": "2021-08-01",
"count": 1
},
{
"date": "2021-10-02",
"count": 1
},
{
"date": "2021-10-17",
"count": 1
},
{
"date": "2021-11-01",
"count": 1
},
{
"date": "2021-11-02",
"count": 1
},
{
"date": "2021-11-05",
"count": 1
},
{
"date": "2021-11-20",
"count": 1
},
{
"date": "2022-01-24",
"count": 1
},
{
"date": "2022-02-02",
"count": 1
},
{
"date": "2022-02-03",
"count": 1
},
{
"date": "2022-02-05",
"count": 1
},
{
"date": "2022-02-07",
"count": 1
},
{
"date": "2022-02-26",
"count": 1
},
{
"date": "2022-04-26",
"count": 1
},
{
"date": "2022-06-19",
"count": 1
},
{
"date": "2022-09-06",
"count": 1
},
{
"date": "2022-09-09",
"count": 1
},
{
"date": "2022-09-12",
"count": 1
},
{
"date": "2022-09-13",
"count": 1
},
{
"date": "2022-09-19",
"count": 1
},
{
"date": "2022-12-01",
"count": 1
},
{
"date": "2023-01-02",
"count": 1
},
{
"date": "2023-02-28",
"count": 1
},
{
"date": "2023-03-01",
"count": 1
},
{
"date": "2023-03-09",
"count": 1
},
{
"date": "2023-03-28",
"count": 1
},
{
"date": "2023-04-09",
"count": 1
},
{
"date": "2023-05-04",
"count": 1
},
{
"date": "2023-05-20",
"count": 1
},
{
"date": "2023-06-03",
"count": 1
},
{
"date": "2023-06-15",
"count": 1
},
{
"date": "2023-06-26",
"count": 1
},
{
"date": "2023-08-28",
"count": 1
},
{
"date": "2023-10-16",
"count": 1
},
{
"date": "2023-10-26",
"count": 1
},
{
"date": "2023-10-27",
"count": 2
},
{
"date": "2023-10-31",
"count": 1
},
{
"date": "2023-11-15",
"count": 1
},
{
"date": "2023-12-01",
"count": 2
},
{
"date": "2023-12-05",
"count": 1
},
{
"date": "2024-02-06",
"count": 1
},
{
"date": "2024-02-09",
"count": 1
},
{
"date": "2024-02-19",
"count": 2
},
{
"date": "2024-02-22",
"count": 1
},
{
"date": "2024-03-06",
"count": 1
},
{
"date": "2024-03-15",
"count": 1
},
{
"date": "2024-03-20",
"count": 1
},
{
"date": "2024-03-23",
"count": 1
},
{
"date": "2024-04-30",
"count": 1
},
{
"date": "2024-05-07",
"count": 1
},
{
"date": "2024-05-19",
"count": 1
},
{
"date": "2024-05-21",
"count": 1
},
{
"date": "2024-05-31",
"count": 1
},
{
"date": "2024-07-03",
"count": 1
},
{
"date": "2024-07-18",
"count": 1
},
{
"date": "2024-08-15",
"count": 1
},
{
"date": "2024-10-06",
"count": 2
},
{
"date": "2024-10-25",
"count": 1
},
{
"date": "2025-01-11",
"count": 1
},
{
"date": "2025-01-30",
"count": 1
},
{
"date": "2025-03-27",
"count": 1
},
{
"date": "2025-04-28",
"count": 1
},
{
"date": "2025-07-21",
"count": 1
},
{
"date": "2026-02-22",
"count": 1
}
],
"complete": true,
"collected": 128,
"total_stars": 128
},
"open_issues_and_prs": 16
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"samples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"noxfile.py"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"src/pyproject_hooks/py.typed"
],
"toolchain_manifests": [],
"largest_source_bytes": 15456,
"source_files_sampled": 26,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"docs/requirements.txt",
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 3,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 8,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "build",
"direct": false,
"version": "1.4.2",
"ecosystem": "pypi"
},
{
"name": "flake8",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "furo",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": false,
"version": "26.0",
"ecosystem": "pypi"
},
{
"name": "pyproject-hooks",
"direct": false,
"version": "1.2.0",
"ecosystem": "pypi"
},
{
"name": "pytest",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "setuptools",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "sphinx",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "sphinx-issues",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "testpath",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "tomli",
"direct": false,
"version": null,
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 11,
"direct_count": 0,
"indirect_count": 11
}
},
"maintainership": {
"issues": {
"open_prs": 5,
"merged_prs": 102,
"open_issues": 11,
"closed_ratio": 0.891,
"closed_issues": 90,
"closed_unmerged_prs": 21
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "takluyver",
"commits": 178,
"avatar_url": "https://avatars.githubusercontent.com/u/327925?v=4"
},
{
"type": "User",
"login": "jaraco",
"commits": 69,
"avatar_url": "https://avatars.githubusercontent.com/u/308610?v=4"
},
{
"type": "User",
"login": "pradyunsg",
"commits": 66,
"avatar_url": "https://avatars.githubusercontent.com/u/3275593?v=4"
},
{
"type": "User",
"login": "pfmoore",
"commits": 26,
"avatar_url": "https://avatars.githubusercontent.com/u/1110419?v=4"
},
{
"type": "User",
"login": "sbidoul",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/692075?v=4"
},
{
"type": "User",
"login": "hexagonrecursion",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/52621858?v=4"
},
{
"type": "User",
"login": "graingert",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/413772?v=4"
},
{
"type": "User",
"login": "hugovk",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/1324225?v=4"
},
{
"type": "User",
"login": "abravalheri",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/320755?v=4"
},
{
"type": "User",
"login": "duckinator",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/39698?v=4"
}
],
"contributors_sampled": 32,
"top_contributor_share": 0.412
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 5,
"reason": "7 out of 13 merged PRs checked by a CI test -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 8,
"reason": "Found 11/13 approved changesets -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 84 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 6,
"reason": "dependency not pinned by hash detected -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d9ee8a0fe9f1fe351187ff85965a8b8fcb7e78a6",
"ran_at": "2026-07-21T23:15:53Z",
"aggregate_score": 5.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-04-05T19:05:39Z",
"oldest_open_prs": [
{
"number": 181,
"created_at": "2023-11-01T20:53:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 215,
"created_at": "2025-05-09T15:00:48Z",
"last_comment_at": "2025-05-22T13:12:21Z",
"last_comment_author": "notatallshaw"
},
{
"number": 216,
"created_at": "2025-05-22T16:29:11Z",
"last_comment_at": "2025-06-07T11:48:39Z",
"last_comment_author": "takluyver"
},
{
"number": 227,
"created_at": "2026-06-04T19:23:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 230,
"created_at": "2026-07-03T05:17:52Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-04-05T19:03:53Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 10,
"created_at": "2018-08-01T10:00:55Z",
"last_comment_at": "2023-03-07T01:35:46Z",
"last_comment_author": "vkottler"
},
{
"number": 148,
"created_at": "2022-08-26T09:02:32Z",
"last_comment_at": "2022-09-12T08:29:42Z",
"last_comment_author": "commodo"
},
{
"number": 156,
"created_at": "2022-11-18T12:42:32Z",
"last_comment_at": "2022-11-18T14:51:14Z",
"last_comment_author": "pradyunsg"
},
{
"number": 157,
"created_at": "2022-11-18T12:48:52Z",
"last_comment_at": "2026-02-18T15:28:13Z",
"last_comment_author": "takluyver"
},
{
"number": 168,
"created_at": "2023-04-07T10:05:35Z",
"last_comment_at": "2025-04-13T19:16:33Z",
"last_comment_author": "notatallshaw"
},
{
"number": 177,
"created_at": "2023-08-29T17:36:25Z",
"last_comment_at": "2025-03-06T20:40:07Z",
"last_comment_author": "webknjaz"
},
{
"number": 206,
"created_at": "2024-10-06T04:27:21Z",
"last_comment_at": "2024-10-30T15:05:14Z",
"last_comment_author": "abravalheri"
},
{
"number": 207,
"created_at": "2024-10-07T09:51:14Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 208,
"created_at": "2024-11-05T00:02:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 226,
"created_at": "2026-04-09T19:22:41Z",
"last_comment_at": "2026-05-19T10:35:31Z",
"last_comment_author": "takluyver"
},
{
"number": 228,
"created_at": "2026-06-06T18:43:42Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/pypa/pyproject-hooks",
"host": "github.com",
"name": "pyproject-hooks",
"owner": "pypa"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"security": 67,
"vitality": 29,
"community": 60,
"governance": 74,
"engineering": 90
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "critical",
"name": "Vitality",
"value": 29,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"commits_last_year": 9,
"human_commit_share": 1,
"days_since_last_push": 107,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 107 days ago",
"points": 9.9,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 107
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "9 commits in the last year",
"points": 9,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 9
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"releases_count": 18,
"latest_release_tag": "v1.2.0",
"releases_from_tags": true,
"days_since_latest_release": 660,
"mean_days_between_releases": 160.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "18 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 18
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 660 days ago",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 660
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~160.2 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 160.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 107,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 107 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 107
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 60,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"forks": 58,
"stars": 128,
"watchers": 13,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "128 stars",
"points": 34.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 128
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "58 forks",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 58
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "13 watchers",
"points": 6,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 13
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 74,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 32,
"top_contributor_share": 0.412
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 41% of commits",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 41
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "32 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 32
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 84 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"merged_prs": 102,
"open_issues": 11,
"closed_issues": 90,
"issue_closed_ratio": 0.891,
"closed_unmerged_prs": 21
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "89% of issues closed",
"points": 41.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 89
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "102/123 decided PRs merged",
"points": 31.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 102,
"decided": 123
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 11/13 approved changesets -- score normalized to 8",
"points": 12,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"followers": 2375,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "pypa",
"public_repos": 59,
"account_age_days": 5620
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2,375 followers of pypa",
"points": 24.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2375,
"login": "pypa"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "59 public repos, account ~15 yr old",
"points": 24.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 59
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"packages": [
"pyproject_hooks"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 660
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 660 days ago",
"points": 14,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 660
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "4 published versions",
"points": 12,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 4
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 90,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 16,
"status": "met",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 13 merged PRs checked by a CI test -- score normalized to 5",
"points": 10,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"python",
"packaging"
],
"has_wiki": true,
"homepage": "https://pyproject-hooks.readthedocs.io/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://pyproject-hooks.readthedocs.io/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "2 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 2
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 67,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 13 merged PRs checked by a CI test -- score normalized to 5",
"points": 1.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 11/13 approved changesets -- score normalized to 8",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 84 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 3,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 3 resolved dependencies against OSV; 8 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 3
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 8
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 3,
"unassessed_packages": 8,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 3,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 30
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 52,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 23,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.43,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "43 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 22.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 43,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [
"noxfile.py"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"src/pyproject_hooks/py.typed"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "noxfile.py",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "noxfile.py"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 11,
"status": "met",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "src/pyproject_hooks/py.typed",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "src/pyproject_hooks/py.typed"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 15456,
"source_files_sampled": 26,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (src/pyproject_hooks/py.typed)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "src/pyproject_hooks/py.typed",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/26 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 26,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"samples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-21T23:16:20.657300Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pypa/pyproject-hooks.svg",
"full_name": "pypa/pyproject-hooks",
"license_state": "standard",
"license_spdx": "MIT"
}Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.26.0 — повна методологія · вікі метрик.
Як окремий результат виглядає на тлі всього реєстру: сукупна статистика — PyPI.