sebastienrousseau/bankstatementparser має індекс здоров’я 84 зі 100, що відповідає смузі «Відмінний». Найвищий показник — Engineering Quality (90/100), найнижчий — Sustainability & Governance (54/100). Останнє оновлення було 1 день тому. Більшість нещодавньої роботи виконує один учасник.
84
загалом / 100
Відмінний
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє зважене середнє, відкаліброване за розподілом публічного реєстру, тож діапазони мають перцентильний зміст; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 34 («У зоні ризику»).
84
Винятковий93-100Верхній щабель реєстру (≈ топ-5%); відповідає практично всім перевіреним критеріям
Відмінний80-92Сильний за всіма напрямами; незначні прогалини
Добрий65-79Здоровий; прогалини обмежені та керовані
Помірний50-64Прийнятний, але з помітними прогалинами; рекомендовано перевірку
Слабкий35-49Суттєві недоліки в кількох сферах
У зоні ризику20-34Суттєві слабкі місця; впровадження потребує обережності
Критичний1-19Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Зважений загальний бал 71 калібровано до 84 за шкалою опублікованого індексу (калібрування реєстру 2026-08-02).
Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
25/25
Непрямі залежності без відомих сповіщень — жодна непряма залежність не має відомих сповіщень
0/40
Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
source
osv
advisories
0
affected_packages
0
assessed_packages
13
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Виключено з оцінювання (немає даних або не застосовно): Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено з runtime-замиканням залежностей pypi:bankstatementparser@0.0.11 — тим, що тягне за собою встановлення опублікованого пакета, — 13 пакетів. Досяжність не аналізується.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Має свідомо малу вагу (4%): агентний інструментарій — реальний сигнал супроводу, але репозиторій без нього все одно може отримати 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Докладніше
Історія зірок і форків 0 ★ / 8 ⇿
0Зірки
8Форки
10Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 0Мінорні 0Патчі 10
Кожна точка охоплює 2 днів.
OpenSSF Scorecard 7.0 / 10
7.0сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-31 00:30 UTC
Повний розв'язаний набір залежностей із графа залежностей GitHub: 12 прямих і 109 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
Реєстр
Пакет
Версія
Зв'язок
PyPI
defusedxml
0.7.1
пряма
PyPI
fastapi
0.139.2
пряма
PyPI
litellm
1.93.0
пряма
PyPI
lxml
6.1.1
пряма
PyPI
openpyxl
3.1.5
пряма
PyPI
pandas
2.3.3
пряма
PyPI
pdfplumber
0.11.10
пряма
PyPI
polars
1.43.0
пряма
PyPI
pydantic
2.13.4
пряма
PyPI
pypdf
6.14.2
пряма
PyPI
pypdfium2
5.12.1
пряма
PyPI
uvicorn
0.51.0
пряма
PyPI
aiohappyeyeballs
2.6.2
непряма
PyPI
aiohttp
3.14.1
непряма
PyPI
aiosignal
1.4.0
непряма
PyPI
annotated-doc
0.0.4
непряма
PyPI
annotated-types
0.7.0
непряма
PyPI
anyio
4.13.0
непряма
PyPI
ast-serialize
0.6.0
непряма
PyPI
async-timeout
5.0.1
непряма
PyPI
attrs
26.1.0
непряма
PyPI
babel
2.18.0
непряма
PyPI
backrefs
7.0
непряма
PyPI
bandit
1.9.4
непряма
PyPI
certifi
2026.5.20
непряма
PyPI
cffi
2.0.0
непряма
PyPI
charset-normalizer
3.4.7
непряма
PyPI
click
8.4.2
непряма
PyPI
colorama
0.4.6
непряма
PyPI
coverage
7.15.2
непряма
PyPI
cryptography
48.0.1
непряма
PyPI
distro
1.9.0
непряма
PyPI
et-xmlfile
2.0.0
непряма
PyPI
exceptiongroup
1.3.1
непряма
PyPI
fastuuid
0.14.0
непряма
PyPI
filelock
3.29.3
непряма
PyPI
frozenlist
1.8.0
непряма
PyPI
fsspec
2026.4.0
непряма
PyPI
ghp-import
2.1.0
непряма
PyPI
griffelib
2.0.2
непряма
PyPI
h11
0.16.0
непряма
PyPI
hf-xet
1.5.1
непряма
PyPI
httpcore
1.0.9
непряма
PyPI
httpx
0.28.1
непряма
PyPI
huggingface-hub
1.18.0
непряма
PyPI
hypothesis
6.156.7
непряма
PyPI
hypothesis
6.158.1
непряма
PyPI
idna
3.18
непряма
PyPI
importlib-metadata
8.9.0
непряма
PyPI
iniconfig
2.3.0
непряма
PyPI
interrogate
1.7.0
непряма
PyPI
jinja2
3.1.6
непряма
PyPI
jiter
0.15.0
непряма
PyPI
jsonschema
4.26.0
непряма
PyPI
jsonschema-specifications
2025.9.1
непряма
PyPI
librt
0.13.0
непряма
PyPI
markdown
3.10.2
непряма
PyPI
markdown-it-py
4.2.0
непряма
PyPI
markupsafe
3.0.3
непряма
PyPI
mdurl
0.1.2
непряма
PyPI
mergedeep
1.3.4
непряма
PyPI
mkdocs
1.6.1
непряма
PyPI
mkdocs-autorefs
1.4.4
непряма
PyPI
mkdocs-get-deps
0.2.2
непряма
PyPI
mkdocs-material
9.7.7
непряма
PyPI
mkdocs-material-extensions
1.3.1
непряма
PyPI
mkdocstrings
1.0.6
непряма
PyPI
mkdocstrings-python
2.0.4
непряма
PyPI
multidict
6.7.1
непряма
PyPI
mypy
2.3.0
непряма
PyPI
mypy-extensions
1.1.0
непряма
PyPI
numpy
2.2.6
непряма
PyPI
openai
2.41.1
непряма
PyPI
packaging
26.2
непряма
PyPI
paginate
0.5.7
непряма
PyPI
pathspec
1.1.1
непряма
PyPI
pdfminer-six
20260107
непряма
PyPI
pillow
12.3.0
непряма
PyPI
platformdirs
4.10.0
непряма
PyPI
pluggy
1.6.0
непряма
PyPI
polars-runtime-32
1.43.0
непряма
PyPI
propcache
0.5.2
непряма
PyPI
py
1.11.0
непряма
PyPI
py-cpuinfo
9.0.0
непряма
PyPI
pycparser
3.0
непряма
PyPI
pydantic-core
2.46.4
непряма
PyPI
pygments
2.20.0
непряма
PyPI
pymdown-extensions
11.0
непряма
PyPI
pytest
9.1.1
непряма
PyPI
pytest-benchmark
5.2.3
непряма
PyPI
pytest-cov
7.1.0
непряма
PyPI
python-dateutil
2.9.0.post0
непряма
PyPI
python-dotenv
1.2.2
непряма
PyPI
pytz
2026.2
непряма
PyPI
pyyaml
6.0.3
непряма
PyPI
pyyaml-env-tag
1.1
непряма
PyPI
referencing
0.37.0
непряма
PyPI
regex
2026.5.9
непряма
PyPI
requests
2.34.2
непряма
PyPI
rich
15.0.0
непряма
PyPI
rpds-py
0.30.0
непряма
PyPI
ruff
0.15.22
непряма
PyPI
shellingham
1.5.4
непряма
PyPI
six
1.17.0
непряма
PyPI
sniffio
1.3.1
непряма
PyPI
sortedcontainers
2.4.0
непряма
PyPI
starlette
1.3.1
непряма
PyPI
stevedore
5.8.0
непряма
PyPI
tabulate
0.10.0
непряма
PyPI
tiktoken
0.13.0
непряма
PyPI
tokenizers
0.23.1
непряма
PyPI
tomli
2.4.1
непряма
PyPI
tqdm
4.68.2
непряма
PyPI
typer
0.25.1
непряма
PyPI
typing-extensions
4.16.0
непряма
PyPI
typing-inspection
0.4.2
непряма
PyPI
tzdata
2026.3
непряма
PyPI
urllib3
2.7.0
непряма
PyPI
watchdog
6.0.0
непряма
PyPI
yarl
1.24.2
непряма
PyPI
zipp
4.1.0
непряма
Сповіщення про залежності 0
Встановлення pypi:bankstatementparser@0.0.11 тягне 13 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.
Жодне відоме сповіщення не стосується оцінених залежностей.
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [
"banking",
"camt",
"finance",
"iso20022",
"pain001",
"bank-statements",
"cli",
"csv",
"mt940",
"ofx",
"parser",
"categorization",
"deduplication",
"litellm",
"llm",
"ollama",
"pdf",
"fintech",
"rest-api",
"treasury"
],
"is_fork": false,
"size_kb": 2159,
"has_wiki": true,
"homepage": "http://docs.bankstatementparser.com/",
"languages": {
"Shell": 1577,
"Python": 997410,
"Makefile": 3024
},
"pushed_at": "2026-07-29T02:36:26Z",
"created_at": "2023-11-08T09:38:15Z",
"owner_type": "User",
"updated_at": "2026-07-29T11:42:10Z",
"description": "Parse bank statements — CAMT/ISO 20022, PAIN.001, CSV (EN/DE/FR/ES), OFX/QFX, MT940, PDFs (digital + scanned) — into unified Transactions. Deterministic parsers, LLM/vision fallback, Golden Rule + multi-currency + continuity verification, page provenance, dedupe, review, accuracy evals, CLI + REST API. 100% test coverage.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": "https://sebastienrousseau.com",
"name": "Sebastien Rousseau",
"type": "User",
"login": "sebastienrousseau",
"company": null,
"location": "London, UK",
"followers": 153,
"avatar_url": "https://avatars.githubusercontent.com/u/1394998?v=4",
"created_at": "2012-01-31T16:10:59Z",
"is_verified": null,
"public_repos": 146,
"account_age_days": 5294
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.0.11",
"kind": "patch",
"published_at": "2026-07-18T14:53:08Z"
},
{
"tag": "v0.0.10",
"kind": "patch",
"published_at": "2026-06-25T15:42:33Z"
},
{
"tag": "v0.0.9",
"kind": "patch",
"published_at": "2026-06-11T23:07:25Z"
},
{
"tag": "v0.0.8",
"kind": "patch",
"published_at": "2026-04-11T17:43:49Z"
},
{
"tag": "v0.0.7",
"kind": "patch",
"published_at": "2026-04-11T14:01:16Z"
},
{
"tag": "v0.0.6",
"kind": "patch",
"published_at": "2026-04-10T23:15:06Z"
},
{
"tag": "v0.0.5",
"kind": "patch",
"published_at": "2026-04-08T13:35:02Z"
},
{
"tag": "v0.0.4",
"kind": "patch",
"published_at": "2026-04-01T07:40:10Z"
},
{
"tag": "v0.0.3",
"kind": "patch",
"published_at": "2026-03-23T00:47:28Z"
},
{
"tag": "v0.0.2",
"kind": "patch",
"published_at": "2026-03-22T21:14:57Z"
},
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2023-11-08T21:28:21Z"
}
],
"recent_commits": [
{
"oid": "532d0255b8aca1166ee1ea2789b555cfe0c0f571",
"body": "Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.0 to 4.37.3.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/comp\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump github/codeql-action/init from 4.37.0 to 4.37.3 (#128)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-28T19:46:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57c2b4e358cd5127bc0a1461bc9c9a941940e2d8",
"body": "Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action) from 4.37.0 to 4.37.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump github/codeql-action/autobuild from 4.37.0 to 4.37.2 (#130)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-28T19:46:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "063b04f966451ae4ef1dcf983bc4feb179d5b120",
"body": "Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.0 to 4.37.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/c\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump github/codeql-action/analyze from 4.37.0 to 4.37.2 (#134)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-28T19:38:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2ffb5317968e27f7675c38a888ffd43f4a443e36",
"body": "Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.21.3 to 11.0.\n- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)\n- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.21.3...11.0)\n\n---\nupdated-dependencies:\n- depe\n[…]\nns\n dependency-version: '11.0'\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump pymdown-extensions from 10.21.3 to 11.0 (#142)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T08:52:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "27c8e8628406204294a8bc9a329157a9e7e3bb02",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb9\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump actions/checkout from 7.0.0 to 7.0.1 (#129)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T08:19:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4299e9a2d2de713d4ea5ffdc39ca298bfb27b61f",
"body": "Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.3.0 to 7.0.0.\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump actions/setup-python from 6.3.0 to 7.0.0 (#132)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T08:18:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2a74c696b729a6952fefaf386339db9383e95a24",
"body": "Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.14.0 to 1.14.1.\n- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)\n- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/cef221092ed1bacb1cc03d23a2d87d1d172e277b...ba38be9e\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#133)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T08:17:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "71a8bf68a27da0cf304edd4ca46fdaaed6ba3761",
"body": "Bumps [tzdata](https://github.com/python/tzdata) from 2026.2 to 2026.3.\n- [Release notes](https://github.com/python/tzdata/releases)\n- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)\n- [Commits](https://github.com/python/tzdata/compare/2026.2...2026.3)\n\n---\nupdated-dependencies:\n- \n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump tzdata from 2026.2 to 2026.3 (#136)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T08:16:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "37aac0cb482dd4618c29bc62675679408a0ab483",
"body": "Bumps [polars](https://github.com/pola-rs/polars) from 1.42.1 to 1.43.0.\n- [Release notes](https://github.com/pola-rs/polars/releases)\n- [Commits](https://github.com/pola-rs/polars/compare/py-1.42.1...py-1.43.0)\n\n---\nupdated-dependencies:\n- dependency-name: polars\n dependency-version: 1.43.0\n depe\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump polars from 1.42.1 to 1.43.0 (#141)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e6df988db892f9eaca64e6ff26f32cd57e5b260b",
"body": "Bumps [click](https://github.com/pallets/click) from 8.4.1 to 8.4.2.\n- [Release notes](https://github.com/pallets/click/releases)\n- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)\n- [Commits](https://github.com/pallets/click/compare/8.4.1...8.4.2)\n\n---\nupdated-dependencies:\n- depe\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump click from 8.4.1 to 8.4.2 (#140)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "650b8b421116bfc6c37ce684b164aa226e210b89",
"body": "Bumps [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings) from 1.0.4 to 1.0.6.\n- [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases)\n- [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/mkdocstrings/mkdocstrings\n[…]\nrect:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump mkdocstrings from 1.0.4 to 1.0.6 (#139)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1785f0d044b8da717e85e9a5c18ccb219c1e8b9e",
"body": "Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.49.0 to 0.51.0.\n- [Release notes](https://github.com/Kludex/uvicorn/releases)\n- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)\n- [Commits](https://github.com/Kludex/uvicorn/compare/0.49.0...0.51.0)\n\n---\nupdated\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump uvicorn from 0.49.0 to 0.51.0 (#138)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5a6763170a7585abdb0770a80a7298a3d280d19a",
"body": "Bumps [litellm](https://github.com/BerriAI/litellm) from 1.92.0 to 1.93.0.\n- [Release notes](https://github.com/BerriAI/litellm/releases)\n- [Commits](https://github.com/BerriAI/litellm/compare/v1.92.0...v1.93.0)\n\n---\nupdated-dependencies:\n- dependency-name: litellm\n dependency-version: 1.93.0\n dep\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump litellm from 1.92.0 to 1.93.0 (#137)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1812dea25870b39ac2a9693ceb3c9d6aa1182d6e",
"body": "Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.7.6 to 9.7.7.\n- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)\n- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)\n- [Commits](https://github.com/squidfunk/mkdocs-materi\n[…]\nrect:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump mkdocs-material from 9.7.6 to 9.7.7 (#135)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c223f2bb8696b6b8f6d665dee521b253f689a8a",
"body": "Bumps [hypothesis](https://github.com/HypothesisWorks/hypothesis) from 6.156.7 to 6.158.1.\n- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)\n- [Commits](https://github.com/HypothesisWorks/hypothesis/compare/v6.156.7...v6.158.1)\n\n---\nupdated-dependencies:\n- dependency-name: hy\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump hypothesis from 6.156.7 to 6.158.1 (#131)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "162f722a1f6d8919a1fce435ab3e6d59b0acc917",
"body": "Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.2.0 to 12.3.0.\n- [Release notes](https://github.com/python-pillow/Pillow/releases)\n- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)\n- [Commits](https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0)\n[…]\now\n dependency-version: 12.3.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump pillow from 12.2.0 to 12.3.0 (#127)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T08:46:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "22628fcd62cfc1f5d5d08e39f3da390432ab100e",
"body": "Consolidate all 17 open Dependabot PRs into a single release.\n\nPython dependencies (poetry update + regenerated hash-pinned\nrequirements.txt): fastapi 0.139.2, litellm 1.92.0, polars 1.42.1,\npypdfium2 5.12.1, typing-extensions 4.16.0, ast-serialize 0.6.0,\ncoverage 7.15.2, hypothesis 6.156.7, mypy 2.\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "chore(deps): fold all open Dependabot updates into v0.0.11",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-07-18T14:45:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c3a315f7a1915a884c0871b31527047f4b56fc3a",
"body": "…hing\n\nci: token-free PyPI trusted-publishing workflow",
"is_bot": false,
"headline": "Merge pull request #102 from sebastienrousseau/ci/pypi-trusted-publis…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T15:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5eaf91a55d7a2446952119f363f1f40d8a2f720c",
"body": "Adds OIDC trusted publishing (no long-lived token) so releases can be\npublished to PyPI from CI, consistent with the companion packages.\nTriggers on workflow_dispatch (with a tag input) or when a GitHub\nrelease is published. Requires a PyPI trusted publisher configured for\nthe bankstatementparser pr\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "ci: add token-free PyPI trusted-publishing workflow",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T15:49:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a73b917703be0f80db1e2a7ebba095737a3705bc",
"body": "chore(release): v0.0.10",
"is_bot": false,
"headline": "Merge pull request #101 from sebastienrousseau/release/v0.0.10",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T14:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61627c3173ebb6ab41c1e1e6519a46bc710b668c",
"body": "… hardening\n\nFold the [Unreleased] changes into a dated [0.0.10] entry and bump the\nversion across pyproject, setup.cfg, the README badge, and the\n.github/SECURITY.md supported-versions table.\n\nRelease contents:\n- VerificationStatus.UNVERIFIABLE + clearer deterministic-detection\n warning (#99)\n- Do\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "chore(release): v0.0.10 — UNVERIFIABLE status, warning rewrite, audit…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T14:41:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c51651d1be32d77854993b0ed9a9e2f0d42a268d",
"body": "audit: genuine 100% docs + honest 100% coverage (de-pragma)",
"is_bot": false,
"headline": "Merge pull request #100 from sebastienrousseau/audit/full-review",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T13:58:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fdfee3248564ed32bdb057b70256b041947294d",
"body": "…overage\n\nAdversarial audit against four criteria; all gates kept green.\n\nUnit tests (line+branch) genuinely 100%:\n- Removed 27 of 29 `# pragma: no cover` pragmas by making the guarded\n behaviour testable and adding real tests: the `/ingest` REST endpoint\n (400/413/200/422 branches), the API serve\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "test(audit): full-quality pass — 100% docs, pragma cleanup, example c…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T13:41:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "640a898f4799ddd88d0b0f3edf8d7c2f634168ea",
"body": "…-and-warning\n\nfix(hybrid): add UNVERIFIABLE status + clearer deterministic-detection warning",
"is_bot": false,
"headline": "Merge pull request #99 from sebastienrousseau/fix/verification-status…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T10:41:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b94ba760b6338beca47347acbd17a87001cb45e3",
"body": "Introduce VerificationStatus.UNVERIFIABLE for cases where the Golden\nRule cannot be applied (missing opening/closing balance, fewer than\ntwo statements, multi-currency balances that cannot be attributed to a\nsingle currency). Migrate every \"cannot apply the rule\" path that\npreviously reported FAILED\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "feat(hybrid): add UNVERIFIABLE status and reword detection warning",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-25T10:37:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a1c89c6c4acd8690b2bb1c62f32e17c23a4335a0",
"body": "chore(deps): consolidated dependency updates + security fixes",
"is_bot": false,
"headline": "Merge pull request #98 from sebastienrousseau/chore/dependency-updates",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T22:06:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d756fd096c4adbc2312a42ada3038f1e34de8f0",
"body": "Regenerate the lock to the latest compatible versions, covering the\nopen Dependabot PRs and resolving the open security alerts:\n\n- security: starlette 1.2.1 -> 1.3.1 (GHSA-82w8-qh3p-5jfq high,\n GHSA-jp82-jpqv-5vv3 low) and pypdf 6.13.2 -> 6.14.2\n (GHSA-jm82-fx9c-mx94 medium)\n- dev: mypy 1.20.2 -> \n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "chore(deps): consolidated dependency updates + security fixes",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T22:02:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "53cf4f2911da418a6b628530f1465cdef15af920",
"body": "…ns/actions/cache-6.0.0\n\nci: bump actions/cache from 4.3.0 to 6.0.0",
"is_bot": false,
"headline": "Merge pull request #95 from sebastienrousseau/dependabot/github_actio…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T21:58:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc71f36b89bd13e2d356f115b2889233789ed12a",
"body": "…ns/actions/checkout-7.0.0\n\nci: bump actions/checkout from 6.0.3 to 7.0.0",
"is_bot": false,
"headline": "Merge pull request #94 from sebastienrousseau/dependabot/github_actio…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T21:58:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02616213d9344bd4525de55e6fb8b999adf5077e",
"body": "…ns/actions/deploy-pages-5.0.0\n\nci: bump actions/deploy-pages from 4.0.5 to 5.0.0",
"is_bot": false,
"headline": "Merge pull request #81 from sebastienrousseau/dependabot/github_actio…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T21:58:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "831bef880d623b8fbc44a2bf4a702c84d3e8efe4",
"body": "…ns/actions/upload-pages-artifact-5.0.0\n\nci: bump actions/upload-pages-artifact from 3.0.1 to 5.0.0",
"is_bot": false,
"headline": "Merge pull request #82 from sebastienrousseau/dependabot/github_actio…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T21:58:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33dc36dbf3768d7c89887cdc70dc0e4472ce9ff2",
"body": "docs(readme): add PyPI version badges to Ecosystem table",
"is_bot": false,
"headline": "Merge pull request #97 from sebastienrousseau/docs/ecosystem-pypi-badges",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T20:51:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1b26c0bc1ab8521349c866e0767e39d7c6f320f",
"body": "All five companion packages are now published on PyPI at v0.0.10; add a\nPyPI column with a live version badge linking to each project page.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "docs(readme): add PyPI version badges to the Ecosystem table",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T20:47:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "836c27d2421f5d97faad770af3c85cb12d1852f9",
"body": "docs(readme): add Ecosystem section for companion packages",
"is_bot": false,
"headline": "Merge pull request #96 from sebastienrousseau/docs/companion-ecosystem",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T20:01:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b7f14ea80928513b6947c1c3632ec513ae104f2",
"body": "Document the five standalone companion repositories that build on the\ncore engine: bankstatementparser-mcp (MCP server), -lsp (MT940 LSP),\n-writer-xlsx (Excel export), -loader-mt942 and -loader-bai2 (additional\ninput formats). Adds a Contents entry and a comparison table.\n\nCo-Authored-By: Claude Opu\n[…]\nm>\n\nAssisted-by: Claude:claude-opus-4-7\n\n---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "docs(readme): add Ecosystem section for companion packages",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-24T19:02:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e339a96594c570623241902c95b3795c9aa82664",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 6.0.0.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/0057852bfaa89a56745cba8c7296529d2fc3983\n[…]\ns:\n- dependency-name: actions/cache\n dependency-version: 6.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "ci: bump actions/cache from 4.3.0 to 6.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-24T02:33:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "943563ee650242a62f94bf234ece24561c807239",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "ci: bump actions/checkout from 6.0.3 to 7.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-24T02:33:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "259ed160b741045be9009759ffaa7a31a98b8889",
"body": "Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 3.0.1 to 5.0.0.\n- [Release notes](https://github.com/actions/upload-pages-artifact/releases)\n- [Commits](https://github.com/actions/upload-pages-artifact/compare/56afc609e74202658d3ffba0e8f6dda462b719fa...fc\n[…]\nname: actions/upload-pages-artifact\n dependency-version: 5.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "ci: bump actions/upload-pages-artifact from 3.0.1 to 5.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T02:33:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3d110e37be3dd2566d399ade9f2389eec6dca8c3",
"body": "Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4.0.5 to 5.0.0.\n- [Release notes](https://github.com/actions/deploy-pages/releases)\n- [Commits](https://github.com/actions/deploy-pages/compare/d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e...cd2ce8fcbc39b97be8ca5fce6e763baed58fa1\n[…]\npendency-name: actions/deploy-pages\n dependency-version: 5.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "ci: bump actions/deploy-pages from 4.0.5 to 5.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T02:33:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1b54034225244f6b4a42510e3183364bf39f1b24",
"body": "…egression suite, accuracy evals\n\nfeat(v0.0.9): audit pass, hybrid trust & correctness, regression suite, accuracy evals",
"is_bot": false,
"headline": "Merge PR #79: feat(v0.0.9) Audit Pass — hybrid trust & correctness, r…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T23:03:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f9388a1961d89266c6446435944c5a6c0f79ab6",
"body": "All Unreleased entries (hybrid trust slice, regression suite,\nquick wins 5-8) ship in v0.0.9; section dated 2026-06-11.",
"is_bot": false,
"headline": "docs(changelog): fold Unreleased into 0.0.9 for release",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T22:57:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c4d996aed5c118fd8b126711b5f51c2c313c493",
"body": "Plain \"bash\" on Windows runners resolves to the System32 WSL\nlauncher, which exits 1 when no distribution is installed. The\nregression tests now derive the Git Bash path from git.exe.\nAlso pin LF endings for *.sh via .gitattributes — runners check\nout with core.autocrlf=true, and CRLF breaks bash scripts.",
"is_bot": false,
"headline": "fix(ci): run shell-example tests under Git Bash on Windows",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T22:26:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01b71c5a75e66cb6f99a8ba7365471601bc29ae7",
"body": "…ES headers, eval harness\n\n5. Page provenance in the text-LLM path: extract_text_pages()\n keeps per-page text, smart_ingest attributes each row to the\n page containing its description (Transaction.source_page;\n vision rows inherit it from their bounding box). Surfaced in\n the ingest CSV and \n[…]\nks on the mock self-check and\n runs the real-model eval non-blocking, gated on the\n BSP_EVAL_MODEL repo variable.\n\n818 tests, coverage gated at 100% line+branch; docs counts and\nCHANGELOG updated.",
"is_bot": false,
"headline": "feat(hybrid): quick wins 5-8 — page provenance, continuity check, FR/…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T21:45:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f84dd048e25c0066d2e794ec72fddb1e3b07408e",
"body": "Restores pyproject.toml, setup.cfg, api.py, SECURITY.md and the\napi version test to 0.0.9. Version renumbering only happens on\nexplicit request.",
"is_bot": false,
"headline": "revert: keep version at 0.0.9 (0.1.0 bump was not requested)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T21:44:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28581f71e90baeb4752526c041fd47310cc8c791",
"body": "Two new regression modules close the gap the docs-accuracy tests left\nopen (they checked claims, not behaviour):\n\n1. tests/test_regression_examples.py — every script under examples/\n and examples/hybrid/ (plus both shell walkthroughs) runs as a real\n subprocess against the repo fixtures; optiona\n[…]\numn\nnames as the CSV body. Fixed in cli.py with an in-process\nreal-fixture test (the existing tests mocked the stats shape).\n\n815 tests, coverage gate at 100%; README/FAQ counts and CHANGELOG\nupdated.",
"is_bot": false,
"headline": "test(regression): execute every example script and doc code block in CI",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T19:41:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eaedd9dd7e65edd008fc69cb2786cb15aa7105f6",
"body": "…ing, reverify, multi-currency\n\nFour quick wins for existing users of the hybrid pipeline:\n\n1. Per-row provenance: SourceMethod gains the \"vision\" literal and\n the vision path labels its rows \"vision\" instead of \"llm\"\n (_build_result grows a source_method parameter).\n2. Confidence is acted on: n\n[…]\nfy_transactions (currency-aware dispatch) is exported from\n bankstatementparser.hybrid and shared by orchestrator and CLI.\n\n746 tests, coverage gate at 100%; README/FAQ counts and CHANGELOG\nupdated.",
"is_bot": false,
"headline": "feat(hybrid): trust & correctness slice — provenance, confidence rout…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T18:54:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d6dcd2dd3a15b013c41095a987fd18db8308a656",
"body": "The export_csv/export_json cleanup tests hardcoded\n\"/tmp/test_bsp_output.*\": on windows-latest the simulated partial\n.tmp write failed with FileNotFoundError before the cleanup branch\n(base_parser.py:111/141) could run, leaving Windows coverage at\n99.89% against the 100% gate. Build the path from\ntempfile.gettempdir() instead, and do the same for the\ndirectory-rejection check in test_security.py.",
"is_bot": false,
"headline": "fix(test): use the platform temp dir so export-cleanup runs on Windows",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T17:21:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d23b93cb78e5fea15e8cd118f827acf0fa39447",
"body": "The new windows-latest unit-test jobs surfaced three POSIX\nassumptions in the test suite:\n\n- chmod(0o000) does not revoke read access on Windows: the five\n permission tests now mock os.access / builtins.open instead,\n exercising the same parser and validator branches on every\n platform (coverage \n[…]\nn NamedTemporaryFile\n context fail with WinError 32: the nine affected tests now\n close the handle before parsing, exporting, or unlinking\n\n696 tests pass locally with the 100% coverage gate intact.",
"is_bot": false,
"headline": "fix(test): make 16 tests Windows-compatible for the CI matrix",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T17:10:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "35fe6fb7d41c05df2743941eb4056ab4ae7e5a83",
"body": "The unit-tests job's multi-line pytest command uses backslash\ncontinuations, but windows-latest executes run steps under\nPowerShell by default, which fails to parse them (ParserError:\n\"Missing expression after unary operator '--'\"). Set\n`shell: bash` on the step, matching the platform-parity job's\nexisting configuration.",
"is_bot": false,
"headline": "fix(ci): run unit-test step under bash on Windows runners",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T05:57:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7040ac257ccc515b9d105e56d6dd213871930e2a",
"body": "Implements the 9-item v0.1.0 audit plan plus 100% coverage and\ndocumentation:\n\n- BREAKING: Pain001Parser.get_summary() raises on invalid ISO 20022\n amounts instead of silently zeroing (shared _amounts.iso_decimal)\n- BREAKING: openpyxl moved to the new [excel] extra; core install no\n longer pulls i\n[…]\nCAMT\n recovery mode, and scanner failure_count; one justified pragma\n- README restyled to noyalib conventions (Contents TOC, dividers,\n Documentation table); test-count and coverage claims re-synced",
"is_bot": false,
"headline": "feat(v0.1.0): API safety, 100% coverage gate, docs site, full CI matrix",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-11T00:41:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "492e4e468755ff41d6043c3f55be8468d747430c",
"body": "…e gate, CLI dedupe\n\nCorrectness\n- Decimal end-to-end for all money fields; garbled or missing amounts\n now raise instead of silently becoming 0.0 (new _amounts.py helpers)\n- Dedup keys are occurrence-counted (<hash>:<n>) and include\n transaction_id/reference; fixed index-space bug in\n Deduplicat\n[…]\n03 tests pass; ruff, mypy --strict, bandit all clean\n\nDocs\n- README/FAQ/CONTRIBUTING/compliance docs: \"100% branch coverage\" and\n \"697 tests\" claims replaced with real figures (703 tests, 31 modules)",
"is_bot": false,
"headline": "feat(v0.0.9): audit remediation — Decimal correctness, honest coverag…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-10T21:40:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2a6f84b0639f5f46812a532f0a6bc3f7a101fb56",
"body": "Bumps every live version reference in the repo to 0.0.9. Historical\nmarkers (README feature-row annotations like (v0.0.8), test docstrings\nthat document when each test landed, and the CHANGELOG history) are\ndeliberately preserved.\n\nChanged\n-------\n* pyproject.toml version = \"0.0.9\"\n* setup.\n[…]\n.\n* bandit clean.\n* scripts/verify_locked_hashes.py 100 packages SHA-256 verified.\n* requirements.txt regenerated from poetry.lock (no content change\n vs. previous commit; bytes-identical 915 lines).",
"is_bot": false,
"headline": "chore(v0.0.9): bump live version strings 0.0.8 -> 0.0.9",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-10T20:04:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "11ab677fe8c9edb7cf6f8f225cfcd8920156c91d",
"body": "…t bumps\n\nThree Critical findings from the v0.0.9 internal audit, six quick wins,\nall 20 open Dependabot version-bump PRs drained, and all 18 open\nDependabot security alerts resolved. 30 files: +3,185 / -5,009.\n\nCritical fixes\n--------------\n* C-1 REST API safety floor (api.py): chunked upload with\n\n[…]\nhashes.py: 100 packages SHA-256 verified\n (down from 113 because dup-version entries dropped out).\n* pip install --dry-run --require-hashes -r requirements.txt clean\n (regenerated from poetry.lock).",
"is_bot": false,
"headline": "feat(v0.0.9): audit pass — Critical fixes, security alerts, Dependabo…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-06-10T19:33:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5bdabd92de0c367f542848afd8f1e1ee2ae8ac4b",
"body": "The v0.0.8 release shipped with updated counts and CHANGELOG but\nthe README content was missing for all five new features.\n\nKey Features table:\n * 5 new rows: Multi-currency verification, hledger/beancount\n export, Bulk directory scanner, Account mapping, REST API\n\nInstall section:\n * Added [en\n[…]\nsage,\n curl examples for /ingest and /health\n\nProject Layout:\n * Added enrichment/, export/, api.py lines\n * Updated descriptions to match v0.0.8 module inventory\n\n32/32 docs accuracy tests pass.",
"is_bot": false,
"headline": "docs: add v0.0.8 features to README",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T17:58:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b950a7622c9c167f06a79750646a9c0ed847d700",
"body": "723 tests, 100% coverage. Multi-currency verification, ledger export, scanner, account mapper, REST API.",
"is_bot": false,
"headline": "Merge PR #52: feat(v0.0.8) Full Platform",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T17:38:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86ed5efee52a3dd180a7300abe76f39bcb3394aa",
"body": "…or Python 3.14 compat",
"is_bot": false,
"headline": "fix(test): use asyncio.run() instead of deprecated get_event_loop() f…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T17:10:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00d584d6f09eee8364afa2ca31e15c19407b9caf",
"body": "… account mapper, REST API\n\nFive new features closing every gap identified in the competitive\nanalysis against felgru/bank-statement-parser:\n\n1. Multi-currency balance verification\n verify_balance_multi_currency() groups transactions by currency\n and runs an independent Golden Rule check per gro\n[…]\n and GET /health. Gated behind\n [api] extra. Default bind 127.0.0.1 (safe); use --host 0.0.0.0\n for container deployments.\n\n723 tests at 100% coverage, mypy strict clean, ruff clean, bandit clean.",
"is_bot": false,
"headline": "feat(v0.0.8): full platform — multi-currency, ledger export, scanner,…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T17:05:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c86f30e542221d3e83d5440d24d97d63c988aba3",
"body": "…inicpm-v, strip mode\n\n677 tests, 100% coverage. Closes the local vision 🔴→🟢 gap.",
"is_bot": false,
"headline": "Merge PR #51: feat(v0.0.7) Universal Vision — direct Ollama bridge, m…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T13:57:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9419be651bd2ec359e094413162ecab602215d3e",
"body": "Line-by-line audit found two gaps in README.md:\n\n1. CLI section listed --type camt, pain001, ingest but NOT\n --type review (added in v0.0.6). Added the review examples\n and updated the \"Supports\" line.\n\n2. Key Features table had v0.0.5 rows but no v0.0.6 or v0.0.7\n rows. Added 5 new entries: Categorization (v0.0.6),\n Interactive review (v0.0.6), Bounding boxes (v0.0.6),\n Direct Ollama bridge (v0.0.7), Strip mode (v0.0.7).",
"is_bot": false,
"headline": "docs: add --type review to CLI section + v0.0.6/v0.0.7 Key Features",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T13:52:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6787c90627906dff66b19dffd540320d52495f42",
"body": "Post-rebase corrections caught by the docs accuracy test suite:\n * README + FAQ: 644 tests -> 672 (v0.0.7 adds 28 ollama_direct\n + strip-mode tests on top of v0.0.6's 644)\n * README: 23 modules -> 24 (ollama_direct.py added)\n * .github/SECURITY.md: 0.0.7 added to Supported Versions table",
"is_bot": false,
"headline": "docs: update counts + SECURITY.md for v0.0.7 post-rebase",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:53:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59bc348f5f1920a53f205278a83dff10db74610c",
"body": "CodeQL flagged the previous assertion as\npy/incomplete-url-substring-sanitization (warning, high severity)\nbecause the rule looks for `url.startswith(prefix)` patterns used\nas sanitization checks for trusted-host validation.\n\nIn this test the startswith() was a verification that our code\ngenerates t\n[…]\ne test slightly stricter at the same time (the previous\nassertion would have passed for, e.g.,\n\"http://host.docker.internal.evil.com\" which is exactly the\nclass of bypass the CodeQL rule warns about).",
"is_bot": false,
"headline": "test: replace startswith() URL check with exact equality",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:35:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8771bd71ebdf81f2dc29a820d111e8280f8bce72",
"body": "The quality-gates.yml workflow lists every test file explicitly\n(rather than `pytest tests/`), so newly added test files have to\nbe appended manually. Adding tests/test_hybrid_ollama_direct.py\nwhich lands the 21 new tests for the v0.0.7 direct Ollama bridge.\n\nWithout this entry, CI ran 569 - 21 = 54\n[…]\npytest discovers all\ntests/test_*.py files by default) but CI used the explicit list.\n\nSame fix pattern as the v0.0.5 commit b246e09 which originally\nadded all seven hybrid test files to the workflow.",
"is_bot": false,
"headline": "ci: collect test_hybrid_ollama_direct.py in unit-tests workflow",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:35:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bb44c53c8e17387f822d5e1ad1d09217d47ed105",
"body": "CI runs `poetry install --with dev` without any extras, so httpx\n(which is a transitive dep of litellm in the [hybrid] extra and\ntherefore not in the dev environment) isn't importable on the\nsandbox. mypy on CI failed with:\n\n bankstatementparser/hybrid/ollama_direct.py:92: error: Cannot\n find impl\n[…]\nnimum install.\nThe hybrid module's runtime imports of httpx are wrapped in\ntry/except inside ollama_direct.py and raise a clear install\nhint at call time, so the no-extras path is genuinely supported.",
"is_bot": false,
"headline": "ci: add httpx to mypy ignore_missing_imports",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:35:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c85e74412743fb3908719dc9617f619401f21c84",
"body": "Documentation refresh and version bump for v0.0.7 \"Universal\nVision\". Three independent improvements stacked on top of v0.0.6:\n\n 1. Direct Ollama bridge (committed in fea4a5e parent commits)\n turns the LiteLLM long-prompt hang from 600 s into ~33 s\n 2. Recommended local vision model switched f\n[…]\nutomatically as of v0.0.7\"; the llava\n hallucination row now points at minicpm-v as the local fix;\n two new rows cover strip-mode year confabulation and\n sign-flip on small local models",
"is_bot": false,
"headline": "docs(v0.0.7): minicpm-v default + smoke-test results + version bump",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:35:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e535653b59173c8859083c403373b764d25e5c77",
"body": "Adds 6 new tests covering the strip_rows code path that landed in\nthe previous commit:\n\n test_strip_extractor_calls_completion_per_strip\n End-to-end happy path: 4 strips on a 1-page synthetic PDF,\n header strip extracts balances + 1 transaction, body strips\n extract transactions only\n[…]\nase64 image_url.\n\nAll tests use the same sys.modules monkeypatching pattern as the\nexisting single-shot vision tests, so the strip mode works in CI\nwithout pypdfium2 installed. Coverage stays at 100%.",
"is_bot": false,
"headline": "test(hybrid): strip-mode tests for VisionExtractor",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:31:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8dd67c69dfe081cea2f4d62d93c86f843fa2fdeb",
"body": "Adds bankstatementparser/hybrid/ollama_direct.py — a small (~190\nline) drop-in replacement for litellm.completion that targets\nOllama's /api/chat endpoint via httpx. Designed to sidestep the\nupstream LiteLLM ↔ Ollama integration bug discovered during the\nv0.0.5 smoke test, where vision calls with lo\n[…]\nnal dependency is needed.\n\n21 new tests in test_hybrid_ollama_direct.py mock httpx via\nsys.modules; the entire bridge is exercised end-to-end without a\nrunning Ollama instance. Coverage stays at 100%.",
"is_bot": false,
"headline": "feat(hybrid): direct Ollama bridge bypasses LiteLLM long-prompt hang",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T12:31:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23c738e55f432dcb6ee3d1ef09b770bcea8a08fc",
"body": null,
"is_bot": false,
"headline": "chore: gitignore example-output/ (generated export artifacts)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T09:29:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c01f13becf9e8ee70df56e86e4902eab99d13413",
"body": "Resolves GHSA-3crg-w4f6-42mx. Supersedes dependabot PR #50.\nLockfile-only change — pyproject.toml already allows >=4.0.0.",
"is_bot": false,
"headline": "chore(deps): bump pypdf 6.9.2 → 6.10.0",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-11T08:24:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86431e15b2a3ec667a3810ce6342fbeab5188e30",
"body": "Full v0.0.6 milestone: Python 3.9 drop, categorization, review mode, bbox mapping, security hardening. 649 tests, 100% coverage.",
"is_bot": false,
"headline": "Merge PR #48: feat(v0.0.6) Intelligence Layer — closes #44 #45 #46 #47",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T23:04:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1a1ba52535cba9f17d24a6f63216185f5516f11",
"body": "…lity\n\nThe CAMT streaming throughput test has failed twice on GitHub\nActions shared runners (9,825 and 9,914 TPS) while consistently\npassing locally (27,000+ TPS). The root cause is CPU throttling\non shared CI runners combined with pytest-cov instrumentation\noverhead, NOT a real performance regressi\n[…]\n an accidental synchronous I/O in the hot path) will fail\nthe test on every platform. The test name is updated from\ntest_camt_exceeds_10000_tps to test_camt_exceeds_8000_tps to\nmatch the new contract.",
"is_bot": false,
"headline": "fix(test): lower CAMT TPS threshold from 10,000 to 8,000 for CI stabi…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T22:16:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3d033119783bf38f2110d452c019c5203644ebe2",
"body": "New .githooks/pre-commit script that runs the same 4 gates CI\nenforces (ruff + mypy + pytest + bandit, ~80s on Apple Silicon)\nbefore every commit. If any gate fails, the commit is aborted.\n\nSetup: `make install-hooks` (or `git config core.hooksPath\n.githooks`). One-time per clone, idempotent, safe t\n[…]\nw includes `make install-hooks` in the clone\n instructions\n * New paragraph explaining the hook + how to skip on WIP\n\nREADME.md Local Development:\n * Added `make install-hooks` to the setup block",
"is_bot": false,
"headline": "chore: add pre-commit hook running full `make verify` pipeline",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T21:32:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d72cd140a572fccacaed1b4e143e6cce87fd981b",
"body": "New test_docs_accuracy.py with 32 tests across 8 categories that\nvalidate every factual claim in README, FAQ, CHANGELOG,\nCONTRIBUTING, SECURITY, and the example scripts against the\nactual codebase. If a doc gets stale, the test fails with a clear\nmessage telling the developer what to fix.\n\nCategorie\n[…]\nfunction counting) is 644.\npytest --collect-only shows 649 because benchmark fixtures\ngenerate multiple test items from a single def test_* function.\n\nCI workflow updated to include the new test file.",
"is_bot": false,
"headline": "test(docs): automated docs/README/examples accuracy validation",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T21:03:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c1ec8fd9cb7c0c1c6fd2c5e130178d4eaad4b7f9",
"body": "Addresses every real finding from the pre-merge security,\ncorrectness, and performance audit.\n\nSECURITY\n\n S1 — Prompt injection defense in enrichment categorizer.\n New _sanitize_for_prompt() strips ASCII control characters,\n neutralizes common injection markers ([SYSTEM, [INST), and\n removes bac\n[…]\n_injection_markers\n * test_categorize_warns_on_duplicate_llm_index\n * test_ingest_result_from_json_rejects_oversized_payload\n\n617 tests at 100% coverage, mypy strict clean, ruff clean,\nbandit clean.",
"is_bot": false,
"headline": "fix(security+correctness): deep-dive audit findings",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T19:35:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6d8e298584aba62cb4eeb1cfa7d172b6c344c65c",
"body": "Audit finding: four files had stale \"541 tests\" counts that should\nbe 612 (the feat/v0.0.6 branch added 71 tests for #44/#45/#46).\nREADME module count was \"21\" but the actual count is 23 (the new\nenrichment/ subpackage adds 2 files: __init__.py + categorizer.py).\n\nREADME.md\n * \"541 tests\" -> \"612 t\n[…]\n#46, #47\"\n\nCross-referenced against actual counts:\n pytest --collect-only 612 tests collected\n find -name \"*.py\" 23 modules\n ls examples/** 22 scripts (14 deterministic + 8 hybrid)",
"is_bot": false,
"headline": "docs: fix stale counts + expand v0.0.6 CHANGELOG to full milestone",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T19:05:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "700824737eafec742512c7da1aabd435b05c36da",
"body": "The previous commit added the [enrichment] extra to pyproject.toml\n(litellm only) without regenerating the lockfile. CI fails with\n\"pyproject.toml changed significantly since poetry.lock was last\ngenerated\" — same pattern as the v0.0.5 lockfile refresh.",
"is_bot": false,
"headline": "chore(deps): refresh poetry.lock for [enrichment] extra",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T17:59:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66433e5a20a81105d564800718e45496f8143811",
"body": "Adds tests/test_enrichment_categorizer.py and\ntests/test_hybrid_review_cli.py to the quality-gates.yml explicit\ntest file list. Without this, CI runs 612 - 52 = 560 tests and\nmisses the new modules' coverage.",
"is_bot": false,
"headline": "ci: collect enrichment + review CLI tests in workflow",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T17:51:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc355a6d059a91c73793dd27e346967392b77e3b",
"body": "…ound-trip\n\nCloses #45.\n\nIngestResult JSON serialization:\n * New to_json() instance method produces a stable JSON string\n with schema_version=1, Decimal amounts as strings (no float\n drift), ISO-formatted dates, VerificationStatus enum values,\n and an audit_trail array.\n * New from_json()\n[…]\ntus,\ncorrupt-JSON, explicit-output-path, bbox+raw rendering,\nEOF-as-quit, missing-extra, dispatch-via-run,\nconfidence-absent).\n\n612 tests at 100% line + branch coverage, mypy strict clean,\nruff clean.",
"is_bot": false,
"headline": "feat(cli): interactive --type review subcommand + IngestResult JSON r…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T17:50:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8a697cbb8f4a3d73ae8f8582482a7d35dd832a7a",
"body": "Closes #44.\n\nNew bankstatementparser.enrichment subpackage behind the\n[enrichment] install extra (just litellm — no additional deps).\n\n Categorizer LiteLLM-backed transaction categorizer\n with pluggable schema and batch support\n EnrichedTransaction Wrapper (no\n[…]\ne boundaries, case\nnormalization, unknown categories, missing/optional fields,\nmissing-row handling, graceful failure on LLM errors, JSON\nparsing (fenced, prose-wrapped, invalid), and prompt building.",
"is_bot": false,
"headline": "feat(enrichment): categorization module with pluggable schema",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T17:50:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "719571710dee848175493b523bb7e1014d858062",
"body": "Closes #46.\n\nNew BoundingBox Pydantic model in transaction_models.py with\nnormalized (0.0-1.0) coordinates, page_index, and frozen config.\nNew Transaction.source_bbox: Optional[BoundingBox] field populated\nby the vision path when the multimodal model returns spatial\ncoordinates (always None for dete\n[…]\nw tests in test_hybrid_llm_extractor.py covering: bbox\npresent, bbox with explicit page_index, bbox omitted, bbox\nexplicitly null, non-object bbox, missing required keys, and\nout-of-range coordinates.",
"is_bot": false,
"headline": "feat(model): BoundingBox + Transaction.source_bbox + vision bbox prompts",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-10T17:50:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6399c814b407bb3b48933f58162ca8bfb2ca3022",
"body": "P2 polishing items from the v0.0.6 audit that touch source files\nrather than docs:\n\n bankstatementparser/hybrid/orchestrator.py\n * Module docstring expanded from a one-line summary to a\n structured Sphinx-style description of the three-path\n routing (Path A deterministic, Path B text-L\n[…]\nPython floor changes, classifiers, and version\nbumps. The setup.* files only need to be touched when one of\nthose changes affects pip-21.3-or-older compatibility (which\nis essentially never in 2026+).",
"is_bot": false,
"headline": "docs(code): orchestrator docstring + legacy setup mirror annotations",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T16:43:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "db7f5e0e2a02d8bc900c09f73d722456af71e6b5",
"body": "Implements all P1 and P2 items from the v0.0.6 documentation audit.\n\nP1 — Missing context\n\n CONTRIBUTING.md\n * New \"Optional extras for hybrid pipeline work\" subsection\n listing [hybrid], [hybrid-plus], and [hybrid-vision] with\n one-line guidance per extra\n * `make verify` recommend\n[…]\nCross-platform matrix in examples/hybrid/README.md updated\n to reflect that native Windows is now fully covered\n\n examples/README.md\n * Hybrid section gains the .ps1 row alongside the .sh row",
"is_bot": false,
"headline": "docs: P1 + P2 audit fixes for v0.0.6",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T16:41:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "55afee2ac76bf957e4e9d3e4955ae4bb2d2704c0",
"body": "The previous Makefile used `python3 setup.py sdist bdist_wheel` and\n`twine upload`, which contradicted the actual v0.0.5 release flow\n(`poetry build` + `poetry publish`) and pointed at drifting setup.py\nmetadata. Anyone running `make release` would have produced an\nartifact from the legacy parallel \n[…]\n.md's\n signed-commits policy\n * Pushes the branch and the tag separately so a failed publish\n leaves the tag visible upstream for retry\n\nResolves the P0 alignment finding from the v0.0.6 audit.",
"is_bot": false,
"headline": "chore!: modernise Makefile for Poetry-based build + release flow",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T16:40:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "755105c84d0c0924f291a995351ba52ff88f9327",
"body": "CHANGELOG.md\n * New v0.0.6 section with Removed / Security / Changed / Fixed /\n Migration notes subsections\n * Security table mapping each transitive package to its v0.0.5\n -> v0.0.6 version bump and the GHSAs that close as a result\n * Migration note explicitly tells Python 3.9 holdouts to \n[…]\n v=0.0.6\n * Requirements line \"Python **3.9** through **3.14**\" -> \"Python\n **3.10** through **3.14** (Python 3.9 was dropped in v0.0.6 —\n pin to v0.0.5 if you cannot upgrade your interpreter)\"",
"is_bot": false,
"headline": "docs: v0.0.6 changelog entry + README Python floor update",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T16:00:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fea4a5e984500d82c1f83e30cc5ddce5dc04b120",
"body": "BREAKING CHANGE: minimum supported Python is now 3.10. Users on\nPython 3.9 must stay on v0.0.5 or upgrade their interpreter. The\npublic API is unchanged.\n\nCloses #47.\n\nPython 3.9 reached end-of-life on 2025-10-31. v0.0.5 shipped with\nnine transitive CVEs allow-listed in security.yml because the\npatc\n[…]\ner/, tests/, examples/\n * bandit clean\n * All hybrid examples (01 deterministic, 02 text-LLM mock,\n 03 vision mock, 04 golden rule, 05 dedupe) still run\n end-to-end with the new dependency set",
"is_bot": false,
"headline": "feat!: drop Python 3.9 support, clear transitive CVE allow-list",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T15:57:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c67f5076eb60c6ee0ab9fb2800e40910c7b135a4",
"body": "… vision fallback\n\nRelease v0.0.5 — Universal Extraction. 13 commits, 541 tests, 100% coverage. See CHANGELOG.md for the full breakdown.",
"is_bot": false,
"headline": "Merge PR #43: feat(v0.0.5) hybrid deterministic + LLM extraction with…",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T13:11:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b512cd70d2aba8520ce7e0d3ca9e8fe2350aa5de",
"body": "Three pre-release polish items consolidated into one commit so the\nv0.0.5 tag has a clean tip:\n\n1. Console-script entry point\n * New `bankstatementparser.cli.main()` wrapper\n * `[tool.poetry.scripts]` block in pyproject.toml mapping the\n `bankstatementparser` command to `cli:main`\n * Both \n[…]\ns\n\nVerified: 541 tests at 100% coverage, mypy strict clean, ruff\nclean, bandit clean. The console-script smoke test against the\nCAMT.053 fixture returns the expected DataFrame with all v0.0.5\ncolumns.",
"is_bot": false,
"headline": "docs: pre-release polish — console script, README, CHANGELOG",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T13:05:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e497ebd6bdc81df4be82b8d2bdc66c930abb2894",
"body": "Ran every example end-to-end against local Ollama models on Apple\nSilicon (llama3 4.7 GB, llava 4.7 GB) to validate the library code\nwith the real LLM stack.\n\nFindings:\n\n Path A (deterministic) PERFECT — CAMT.053 fixture, 3 tx, all\n hashes correct\n Path B (text-LLM) \n[…]\nn its\nprocessing time. The default 2.0x is correct for hosted models\nwhich is what we now recommend in the inline comment.\n\nTest suite: still 540 tests at 100% coverage, ruff clean, mypy\nstrict clean.",
"is_bot": false,
"headline": "docs(examples): record smoke-test results against real Ollama models",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T12:30:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "86470870f8b2fee4da8468433005e99dd535d30d",
"body": "Bandit B101 flagged the three `assert` statements in the example as\nunsafe because asserts are stripped under `python -O`. Replaced\nthem with an `_expect()` helper that raises SystemExit on contract\nviolation. Example output is unchanged in the happy path, but the\nfailure mode is now stable under all Python optimisation levels —\nwhich is the right behaviour for a script that doubles as a model\nfor downstream users to copy.",
"is_bot": false,
"headline": "ci: replace asserts with explicit raises in 04_golden_rule example",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T09:46:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec7b5828481efccf39a712fa789f1b4d6153ea98",
"body": "Adds end-to-end runnable demonstrations of every v0.0.5 hybrid code\npath under examples/hybrid/. Real bank PDFs cannot be redistributed\n(PII + copyright), so the suite ships a `generate_sample_pdfs.py`\nscript that produces two reproducible synthetic UK-bank statements:\n\n digital.pdf text-layer PD\n[…]\nstrict\nclean, ruff clean, all five Python examples run end-to-end against\nthe live library (text-LLM and vision examples in MOCK mode), CLI\ningest subcommand smoke-tested against the CAMT.053 fixture.",
"is_bot": false,
"headline": "docs(examples): add hybrid pipeline walkthrough with synthetic PDFs",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T09:38:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a75f63588010be6575d2c1b65a0bec4ea67868c5",
"body": "GHSA-gc5v-m9x4-r6x2 — insecure temp file reuse in\nrequests.utils.extract_zipped_paths(). Reachable only if a caller\nexplicitly invokes that helper to extract a zipped path bundle,\nwhich we never do — our only use of requests is through litellm's\nHTTP client. Patched in 2.33.0 which requires Python >\n[…]\n If a sixth surfaces,\nthe strategic fix is to scope the [hybrid] extras to Python >=\n3.10 rather than continuing to allow-list each transitive issue\nindividually. Python 3.9 reached EOL on 2025-10-31.",
"is_bot": false,
"headline": "ci: allow-list requests temp-file CVE (3.9 only)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:44:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a00518ff163fe3a5f65ea72d79a6ba2b4b564873",
"body": "GHSA-w853-jp5j-5j7f and GHSA-qmgc-5h2g-mvrw — both TOCTOU symlink\nraces during lock acquisition, requiring an attacker with write\naccess to the user's lockfile parent directory. For a local CLI\nbank-statement parser, an attacker at that privilege level can read\nthe source statements directly; the fi\n[…]\n.3, both require Python >= 3.10.\nFilelock on Python 3.10+ already resolves to 3.25.2 (clean); the\nvulnerable 3.19.1 is locked only for the narrow `python_version\n== \"3.9\" and extra == \"hybrid\"` slice.",
"is_bot": false,
"headline": "ci: allow-list filelock TOCTOU CVEs (3.9 + hybrid only)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:38:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e396fca6eeef7eb6cd9f85d30397a0369aec8b06",
"body": "GHSA-cfh3-3jmp-rvhc — out-of-bounds write loading PSD images,\npatched in pillow 12.1.1 which requires Python >= 3.10. Pillow on\nPython 3.10+ already resolves to 12.2.0 (clean); the vulnerable\n11.3.0 is locked only for the very narrow\n`python_version == \"3.9\" and extra == \"hybrid-plus\"` slice.\n\nThe PSD decoder is reachable only if a caller hands a Photoshop\nfile to Pillow — our PDF rendering path only emits and reads PNG,\nso the vulnerable code is not on any execution path we ship.",
"is_bot": false,
"headline": "ci: allow-list pillow PSD decoder CVE (3.9 + hybrid-plus only)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:32:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6e7417f7e3f5b19b0d9c5b7bccb37c98d47e1ce",
"body": "GHSA-m959-cc7f-wv43 (incomplete DNS name constraint enforcement on\nX.509 peer names) was the third cryptography@43.0.3 advisory not\ncaught by the previous allow-list pass. Same scope justification as\nthe other two: we never use cryptography to validate X.509 certs\nfor peer authentication, so the vulnerable code path is unreachable\nfrom anything we ship. Patched in 46.0.6, blocked by the same\nPython > 3.9.1 floor as the rest of the cryptography series.",
"is_bot": false,
"headline": "ci: add third cryptography advisory to allow-list",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:27:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a75fce3b66fbac5b54e5c52293f660b2d6cad107",
"body": "Two more advisories surfaced after the litellm allow-list landed,\nboth on cryptography@43.0.3 which litellm pulls in transitively:\n\n GHSA-r6ph-v2qm-q3c2 SECT curve subgroup attack (high)\n GHSA-79v4-65xg-pq4g OpenSSL bundled in older wheels (low)\n\nNeither is reachable from our import surface — we\n[…]\n1, while bankstatementparser still supports Python\n3.9.0/3.9.1, so Poetry cannot bump them across the matrix. Same\n\"revisit when minimum Python is raised\" reminder as the litellm\nallow-list documents.",
"is_bot": false,
"headline": "ci: allow-list cryptography proxy CVEs (transitive via litellm)",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:24:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b246e0937eee6ccb4ac4da7251b2bc90dce040ad",
"body": "Three CI fixes required after the initial v0.0.5 push:\n\n1. Unit-test workflow explicitly listed every test file by name and\n never picked up the seven new hybrid test files, which dropped\n coverage to 83%. Added all tests/test_hybrid_*.py to the list.\n\n2. Bandit flagged `except Exception: contin\n[…]\non `dependency-review-action` with a documented \"revisit when the\n minimum Python is raised\" comment.\n\nLocally verified: 540 tests pass at 100% coverage, mypy strict clean,\nruff clean, bandit clean.",
"is_bot": false,
"headline": "ci: collect hybrid tests, narrow bandit catch, allow litellm proxy CVEs",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T08:17:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c70d5b1d801237e27b54fcad86c58eff8be417a",
"body": "Regenerates the lock file to match pyproject.toml after adding the\n[hybrid], [hybrid-plus], and [hybrid-vision] extras. Fixes CI failures\nwhere every job exited with:\n\n pyproject.toml changed significantly since poetry.lock was last\n generated. Run `poetry lock` to fix the lock file.\n\nAlso pic\n[…]\n\nsuperseding PRs #41 and #42:\n\n * ruff 0.15.8 -> 0.15.9\n * tzdata 2023.3 -> 2026.1\n\nVerified locally: ruff 0.15.9 lint clean, mypy strict clean, 540 tests\npassing with 100% line+branch coverage.",
"is_bot": false,
"headline": "chore(deps): refresh poetry.lock for v0.0.5 extras",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T07:56:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3b2fc17a462a5e014ffcce7e9bbba9cdc1ecca7",
"body": "Release v0.0.5 \"Universal Extraction\". Combines the deterministic\nreliability of the ISO/exchange-format parsers with an adaptive\nLLM layer for unstandardized PDFs, including a multimodal vision\nfallback for scanned/image-only statements.\n\nArchitecture — three extraction paths via `smart_ingest()`:\n\n[…]\nmypy strict clean. All optional\ndependencies (litellm, pypdf, pypdfium2) are monkeypatched via\n`sys.modules` or completion-function injection, so CI does not\nrequire any of the extras to be installed.",
"is_bot": false,
"headline": "feat(hybrid): add deterministic+LLM pipeline with vision fallback",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T07:22:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "80a6454578619a818b5f12c77da378a6ee8322bd",
"body": "Sweep-only change across 14 files. No functional modifications.\nFiles that also receive feature changes in v0.0.5 (cli, model,\ndeduplicator, input_validator) carry their updated headers alongside\nthose changes in the follow-up commit.",
"is_bot": false,
"headline": "chore: update copyright headers to 2023-2026 Bank Statement Parser",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-08T07:21:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "342363e5c554c72011e1d4a0537f32085fa2c967",
"body": "---\nTHE ARCHITECT ᛫ Sebastien Rousseau ᛫ https://sebastienrousseau.com\nTHE ENGINE ᛞ EUXIS ᛫ Enterprise Unified Execution Intelligence System ᛫ https://euxis.co",
"is_bot": false,
"headline": "fix: bust GitHub badge cache for PyPI Python versions",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-01T14:29:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f00eb80ced2734b255488ee3346a23d3b474195",
"body": "deps: bump ruff to 0.15.8 and codeql-action to 4.35.1",
"is_bot": false,
"headline": "deps: bump ruff to 0.15.8 and codeql-action to 4.35.1",
"author_name": "Sebastien Rousseau",
"author_login": "sebastienrousseau",
"committed_at": "2026-04-01T13:55:17Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 11,
"commits_last_year": 154,
"latest_release_at": "2026-07-18T14:53:08Z",
"latest_release_tag": "v0.0.11",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 11,
"days_since_latest_release": 12,
"mean_days_between_releases": 13.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "bankstatementparser",
"exists": true,
"license": "Apache Software License",
"keywords": [
"License :: Other/Proprietary License",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.13",
"Programming Language :: Python :: 3.14"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/bankstatementparser/",
"is_deprecated": false,
"latest_version": "0.0.11",
"repository_url": "https://github.com/sebastienrousseau/bankstatementparser",
"versions_count": 8,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2023-11-08T21:26:11.541122Z",
"latest_published_at": "2026-07-18T14:53:37.152696Z",
"latest_version_yanked": null,
"days_since_latest_publish": 12
}
]
},
"popularity": {
"forks": 8,
"stars": 38,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2024-10-12",
"count": 1
},
{
"date": "2025-09-19",
"count": 1
},
{
"date": "2026-04-27",
"count": 1
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-06-01",
"count": 1
},
{
"date": "2026-06-10",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
},
{
"date": "2026-07-26",
"count": 1
}
],
"complete": true,
"collected": 8,
"total_forks": 8
},
"star_history": null,
"open_issues_and_prs": 9
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"mise.toml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 52634,
"source_files_sampled": 107,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml",
"requirements.txt",
"setup.cfg"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 13,
"malicious_count": 0,
"assessed_package": "pypi:bankstatementparser@0.0.11",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "lxml",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=5.0"
},
{
"name": "openpyxl",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "^3.1.5"
},
{
"name": "pandas",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "^2.3.3"
},
{
"name": "defusedxml",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "^0.7.1"
},
{
"name": "pydantic",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "^2.11.0"
},
{
"name": "polars",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "^1.32.0"
},
{
"name": "litellm",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.83.10"
},
{
"name": "pypdf",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=4.0.0"
},
{
"name": "pdfplumber",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.11.0"
},
{
"name": "pypdfium2",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=4.30.0"
},
{
"name": "fastapi",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.115.0"
},
{
"name": "uvicorn",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.34.0"
},
{
"name": "lxml",
"manifest": "setup.cfg",
"ecosystem": "pypi",
"version_constraint": ">=4.9.3"
},
{
"name": "openpyxl",
"manifest": "setup.cfg",
"ecosystem": "pypi",
"version_constraint": ">=3.1.2"
},
{
"name": "pandas",
"manifest": "setup.cfg",
"ecosystem": "pypi",
"version_constraint": ">=2.1.1"
},
{
"name": "defusedxml",
"manifest": "setup.cfg",
"ecosystem": "pypi",
"version_constraint": ">=0.7.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "defusedxml",
"direct": true,
"version": "0.7.1",
"ecosystem": "pypi"
},
{
"name": "fastapi",
"direct": true,
"version": "0.139.2",
"ecosystem": "pypi"
},
{
"name": "litellm",
"direct": true,
"version": "1.93.0",
"ecosystem": "pypi"
},
{
"name": "lxml",
"direct": true,
"version": "6.1.1",
"ecosystem": "pypi"
},
{
"name": "openpyxl",
"direct": true,
"version": "3.1.5",
"ecosystem": "pypi"
},
{
"name": "pandas",
"direct": true,
"version": "2.3.3",
"ecosystem": "pypi"
},
{
"name": "pdfplumber",
"direct": true,
"version": "0.11.10",
"ecosystem": "pypi"
},
{
"name": "polars",
"direct": true,
"version": "1.43.0",
"ecosystem": "pypi"
},
{
"name": "pydantic",
"direct": true,
"version": "2.13.4",
"ecosystem": "pypi"
},
{
"name": "pypdf",
"direct": true,
"version": "6.14.2",
"ecosystem": "pypi"
},
{
"name": "pypdfium2",
"direct": true,
"version": "5.12.1",
"ecosystem": "pypi"
},
{
"name": "uvicorn",
"direct": true,
"version": "0.51.0",
"ecosystem": "pypi"
},
{
"name": "aiohappyeyeballs",
"direct": false,
"version": "2.6.2",
"ecosystem": "pypi"
},
{
"name": "aiohttp",
"direct": false,
"version": "3.14.1",
"ecosystem": "pypi"
},
{
"name": "aiosignal",
"direct": false,
"version": "1.4.0",
"ecosystem": "pypi"
},
{
"name": "annotated-doc",
"direct": false,
"version": "0.0.4",
"ecosystem": "pypi"
},
{
"name": "annotated-types",
"direct": false,
"version": "0.7.0",
"ecosystem": "pypi"
},
{
"name": "anyio",
"direct": false,
"version": "4.13.0",
"ecosystem": "pypi"
},
{
"name": "ast-serialize",
"direct": false,
"version": "0.6.0",
"ecosystem": "pypi"
},
{
"name": "async-timeout",
"direct": false,
"version": "5.0.1",
"ecosystem": "pypi"
},
{
"name": "attrs",
"direct": false,
"version": "26.1.0",
"ecosystem": "pypi"
},
{
"name": "babel",
"direct": false,
"version": "2.18.0",
"ecosystem": "pypi"
},
{
"name": "backrefs",
"direct": false,
"version": "7.0",
"ecosystem": "pypi"
},
{
"name": "bandit",
"direct": false,
"version": "1.9.4",
"ecosystem": "pypi"
},
{
"name": "certifi",
"direct": false,
"version": "2026.5.20",
"ecosystem": "pypi"
},
{
"name": "cffi",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "charset-normalizer",
"direct": false,
"version": "3.4.7",
"ecosystem": "pypi"
},
{
"name": "click",
"direct": false,
"version": "8.4.2",
"ecosystem": "pypi"
},
{
"name": "colorama",
"direct": false,
"version": "0.4.6",
"ecosystem": "pypi"
},
{
"name": "coverage",
"direct": false,
"version": "7.15.2",
"ecosystem": "pypi"
},
{
"name": "cryptography",
"direct": false,
"version": "48.0.1",
"ecosystem": "pypi"
},
{
"name": "distro",
"direct": false,
"version": "1.9.0",
"ecosystem": "pypi"
},
{
"name": "et-xmlfile",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "exceptiongroup",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "fastuuid",
"direct": false,
"version": "0.14.0",
"ecosystem": "pypi"
},
{
"name": "filelock",
"direct": false,
"version": "3.29.3",
"ecosystem": "pypi"
},
{
"name": "frozenlist",
"direct": false,
"version": "1.8.0",
"ecosystem": "pypi"
},
{
"name": "fsspec",
"direct": false,
"version": "2026.4.0",
"ecosystem": "pypi"
},
{
"name": "ghp-import",
"direct": false,
"version": "2.1.0",
"ecosystem": "pypi"
},
{
"name": "griffelib",
"direct": false,
"version": "2.0.2",
"ecosystem": "pypi"
},
{
"name": "h11",
"direct": false,
"version": "0.16.0",
"ecosystem": "pypi"
},
{
"name": "hf-xet",
"direct": false,
"version": "1.5.1",
"ecosystem": "pypi"
},
{
"name": "httpcore",
"direct": false,
"version": "1.0.9",
"ecosystem": "pypi"
},
{
"name": "httpx",
"direct": false,
"version": "0.28.1",
"ecosystem": "pypi"
},
{
"name": "huggingface-hub",
"direct": false,
"version": "1.18.0",
"ecosystem": "pypi"
},
{
"name": "hypothesis",
"direct": false,
"version": "6.156.7",
"ecosystem": "pypi"
},
{
"name": "hypothesis",
"direct": false,
"version": "6.158.1",
"ecosystem": "pypi"
},
{
"name": "idna",
"direct": false,
"version": "3.18",
"ecosystem": "pypi"
},
{
"name": "importlib-metadata",
"direct": false,
"version": "8.9.0",
"ecosystem": "pypi"
},
{
"name": "iniconfig",
"direct": false,
"version": "2.3.0",
"ecosystem": "pypi"
},
{
"name": "interrogate",
"direct": false,
"version": "1.7.0",
"ecosystem": "pypi"
},
{
"name": "jinja2",
"direct": false,
"version": "3.1.6",
"ecosystem": "pypi"
},
{
"name": "jiter",
"direct": false,
"version": "0.15.0",
"ecosystem": "pypi"
},
{
"name": "jsonschema",
"direct": false,
"version": "4.26.0",
"ecosystem": "pypi"
},
{
"name": "jsonschema-specifications",
"direct": false,
"version": "2025.9.1",
"ecosystem": "pypi"
},
{
"name": "librt",
"direct": false,
"version": "0.13.0",
"ecosystem": "pypi"
},
{
"name": "markdown",
"direct": false,
"version": "3.10.2",
"ecosystem": "pypi"
},
{
"name": "markdown-it-py",
"direct": false,
"version": "4.2.0",
"ecosystem": "pypi"
},
{
"name": "markupsafe",
"direct": false,
"version": "3.0.3",
"ecosystem": "pypi"
},
{
"name": "mdurl",
"direct": false,
"version": "0.1.2",
"ecosystem": "pypi"
},
{
"name": "mergedeep",
"direct": false,
"version": "1.3.4",
"ecosystem": "pypi"
},
{
"name": "mkdocs",
"direct": false,
"version": "1.6.1",
"ecosystem": "pypi"
},
{
"name": "mkdocs-autorefs",
"direct": false,
"version": "1.4.4",
"ecosystem": "pypi"
},
{
"name": "mkdocs-get-deps",
"direct": false,
"version": "0.2.2",
"ecosystem": "pypi"
},
{
"name": "mkdocs-material",
"direct": false,
"version": "9.7.7",
"ecosystem": "pypi"
},
{
"name": "mkdocs-material-extensions",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "mkdocstrings",
"direct": false,
"version": "1.0.6",
"ecosystem": "pypi"
},
{
"name": "mkdocstrings-python",
"direct": false,
"version": "2.0.4",
"ecosystem": "pypi"
},
{
"name": "multidict",
"direct": false,
"version": "6.7.1",
"ecosystem": "pypi"
},
{
"name": "mypy",
"direct": false,
"version": "2.3.0",
"ecosystem": "pypi"
},
{
"name": "mypy-extensions",
"direct": false,
"version": "1.1.0",
"ecosystem": "pypi"
},
{
"name": "numpy",
"direct": false,
"version": "2.2.6",
"ecosystem": "pypi"
},
{
"name": "openai",
"direct": false,
"version": "2.41.1",
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": false,
"version": "26.2",
"ecosystem": "pypi"
},
{
"name": "paginate",
"direct": false,
"version": "0.5.7",
"ecosystem": "pypi"
},
{
"name": "pathspec",
"direct": false,
"version": "1.1.1",
"ecosystem": "pypi"
},
{
"name": "pdfminer-six",
"direct": false,
"version": "20260107",
"ecosystem": "pypi"
},
{
"name": "pillow",
"direct": false,
"version": "12.3.0",
"ecosystem": "pypi"
},
{
"name": "platformdirs",
"direct": false,
"version": "4.10.0",
"ecosystem": "pypi"
},
{
"name": "pluggy",
"direct": false,
"version": "1.6.0",
"ecosystem": "pypi"
},
{
"name": "polars-runtime-32",
"direct": false,
"version": "1.43.0",
"ecosystem": "pypi"
},
{
"name": "propcache",
"direct": false,
"version": "0.5.2",
"ecosystem": "pypi"
},
{
"name": "py",
"direct": false,
"version": "1.11.0",
"ecosystem": "pypi"
},
{
"name": "py-cpuinfo",
"direct": false,
"version": "9.0.0",
"ecosystem": "pypi"
},
{
"name": "pycparser",
"direct": false,
"version": "3.0",
"ecosystem": "pypi"
},
{
"name": "pydantic-core",
"direct": false,
"version": "2.46.4",
"ecosystem": "pypi"
},
{
"name": "pygments",
"direct": false,
"version": "2.20.0",
"ecosystem": "pypi"
},
{
"name": "pymdown-extensions",
"direct": false,
"version": "11.0",
"ecosystem": "pypi"
},
{
"name": "pytest",
"direct": false,
"version": "9.1.1",
"ecosystem": "pypi"
},
{
"name": "pytest-benchmark",
"direct": false,
"version": "5.2.3",
"ecosystem": "pypi"
},
{
"name": "pytest-cov",
"direct": false,
"version": "7.1.0",
"ecosystem": "pypi"
},
{
"name": "python-dateutil",
"direct": false,
"version": "2.9.0.post0",
"ecosystem": "pypi"
},
{
"name": "python-dotenv",
"direct": false,
"version": "1.2.2",
"ecosystem": "pypi"
},
{
"name": "pytz",
"direct": false,
"version": "2026.2",
"ecosystem": "pypi"
},
{
"name": "pyyaml",
"direct": false,
"version": "6.0.3",
"ecosystem": "pypi"
},
{
"name": "pyyaml-env-tag",
"direct": false,
"version": "1.1",
"ecosystem": "pypi"
},
{
"name": "referencing",
"direct": false,
"version": "0.37.0",
"ecosystem": "pypi"
},
{
"name": "regex",
"direct": false,
"version": "2026.5.9",
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": false,
"version": "2.34.2",
"ecosystem": "pypi"
},
{
"name": "rich",
"direct": false,
"version": "15.0.0",
"ecosystem": "pypi"
},
{
"name": "rpds-py",
"direct": false,
"version": "0.30.0",
"ecosystem": "pypi"
},
{
"name": "ruff",
"direct": false,
"version": "0.15.22",
"ecosystem": "pypi"
},
{
"name": "shellingham",
"direct": false,
"version": "1.5.4",
"ecosystem": "pypi"
},
{
"name": "six",
"direct": false,
"version": "1.17.0",
"ecosystem": "pypi"
},
{
"name": "sniffio",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "sortedcontainers",
"direct": false,
"version": "2.4.0",
"ecosystem": "pypi"
},
{
"name": "starlette",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "stevedore",
"direct": false,
"version": "5.8.0",
"ecosystem": "pypi"
},
{
"name": "tabulate",
"direct": false,
"version": "0.10.0",
"ecosystem": "pypi"
},
{
"name": "tiktoken",
"direct": false,
"version": "0.13.0",
"ecosystem": "pypi"
},
{
"name": "tokenizers",
"direct": false,
"version": "0.23.1",
"ecosystem": "pypi"
},
{
"name": "tomli",
"direct": false,
"version": "2.4.1",
"ecosystem": "pypi"
},
{
"name": "tqdm",
"direct": false,
"version": "4.68.2",
"ecosystem": "pypi"
},
{
"name": "typer",
"direct": false,
"version": "0.25.1",
"ecosystem": "pypi"
},
{
"name": "typing-extensions",
"direct": false,
"version": "4.16.0",
"ecosystem": "pypi"
},
{
"name": "typing-inspection",
"direct": false,
"version": "0.4.2",
"ecosystem": "pypi"
},
{
"name": "tzdata",
"direct": false,
"version": "2026.3",
"ecosystem": "pypi"
},
{
"name": "urllib3",
"direct": false,
"version": "2.7.0",
"ecosystem": "pypi"
},
{
"name": "watchdog",
"direct": false,
"version": "6.0.0",
"ecosystem": "pypi"
},
{
"name": "yarl",
"direct": false,
"version": "1.24.2",
"ecosystem": "pypi"
},
{
"name": "zipp",
"direct": false,
"version": "4.1.0",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 121,
"direct_count": 12,
"indirect_count": 109
}
},
"maintainership": {
"issues": {
"open_prs": 9,
"merged_prs": 41,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 7,
"closed_unmerged_prs": 94
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "sebastienrousseau",
"commits": 141,
"avatar_url": "https://avatars.githubusercontent.com/u/1394998?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"commit-signature-verification.yml",
"docs.yml",
"pypi-publish.yml",
"quality-gates.yml",
"release-integrity.yml",
"security.yml"
],
"has_docs_dir": true,
"linter_configs": [
".pylintrc"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"poetry.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/6 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 8,
"reason": "dependency not pinned by hash detected -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "532d0255b8aca1166ee1ea2789b555cfe0c0f571",
"ran_at": "2026-07-31T00:30:37Z",
"aggregate_score": 7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-29T02:33:51Z",
"oldest_open_prs": [
{
"number": 143,
"created_at": "2026-07-29T02:33:36Z",
"last_comment_at": "2026-07-29T02:33:37Z",
"last_comment_author": "dependabot"
},
{
"number": 144,
"created_at": "2026-07-29T02:33:43Z",
"last_comment_at": "2026-07-29T02:33:44Z",
"last_comment_author": "dependabot"
},
{
"number": 145,
"created_at": "2026-07-29T02:33:48Z",
"last_comment_at": "2026-07-29T02:33:49Z",
"last_comment_author": "dependabot"
},
{
"number": 146,
"created_at": "2026-07-29T02:33:53Z",
"last_comment_at": "2026-07-29T02:33:54Z",
"last_comment_author": "dependabot"
},
{
"number": 147,
"created_at": "2026-07-29T02:33:59Z",
"last_comment_at": "2026-07-29T02:33:59Z",
"last_comment_author": "dependabot"
},
{
"number": 148,
"created_at": "2026-07-29T02:34:30Z",
"last_comment_at": "2026-07-29T02:34:31Z",
"last_comment_author": "dependabot"
},
{
"number": 149,
"created_at": "2026-07-29T02:35:14Z",
"last_comment_at": "2026-07-29T02:35:15Z",
"last_comment_author": "dependabot"
},
{
"number": 150,
"created_at": "2026-07-29T02:35:54Z",
"last_comment_at": "2026-07-29T02:35:55Z",
"last_comment_author": "dependabot"
},
{
"number": 151,
"created_at": "2026-07-29T02:36:27Z",
"last_comment_at": "2026-07-29T02:36:28Z",
"last_comment_author": "dependabot"
}
],
"last_merged_pr_at": "2026-07-28T19:46:53Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/sebastienrousseau/bankstatementparser",
"host": "github.com",
"name": "bankstatementparser",
"owner": "sebastienrousseau"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 71 is calibrated to 84 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 71,
"calibrated": 84,
"calibration": "2026-08-02"
}
}
],
"value": 84,
"inputs": {
"security": 76,
"vitality": 79,
"community": 58,
"governance": 54,
"calibration": "2026-08-02",
"engineering": 90,
"ai_readiness": 61,
"weighted_overall_raw": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 79,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"commits_last_year": 154,
"human_commit_share": 0.8,
"days_since_last_push": 1,
"active_weeks_last_year": 11
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "11/52 weeks with commits",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 11
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "154 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 154
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 11,
"latest_release_tag": "v0.0.11",
"releases_from_tags": false,
"days_since_latest_release": 12,
"mean_days_between_releases": 13.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "11 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 11
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 12 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 12
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~13.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 13.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 17,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 17 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 17
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 58,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"forks": 8,
"stars": 38,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "38 stars",
"points": 25.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 38
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "8 forks",
"points": 7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 8
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 54,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"merged_prs": 41,
"open_issues": 0,
"closed_issues": 7,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 94,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "41/135 decided PRs merged",
"points": 9.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 41,
"decided": 135
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/6 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 63,
"inputs": {
"followers": 153,
"owner_type": "User",
"is_verified": null,
"owner_login": "sebastienrousseau",
"public_repos": 146,
"account_age_days": 5294
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "153 followers of sebastienrousseau",
"points": 15.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 153,
"login": "sebastienrousseau"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "146 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 146
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"bankstatementparser"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 12
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 12 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 12
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "8 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 8
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 90,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "6 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 6
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".pylintrc",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".pylintrc"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "exceptional",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"banking",
"camt",
"finance",
"iso20022",
"pain001",
"bank-statements",
"cli",
"csv",
"mt940",
"ofx",
"parser",
"categorization",
"deduplication",
"litellm",
"llm",
"ollama",
"pdf",
"fintech",
"rest-api",
"treasury"
],
"has_wiki": true,
"homepage": "http://docs.bankstatementparser.com/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://docs.bankstatementparser.com/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "20 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 20
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 76,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/6 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:bankstatementparser@0.0.11 runtime dependency closure — what installing the published package pulls in — 13 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:bankstatementparser@0.0.11",
"assessed": 13
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 13,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 13,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 61,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "80 of 80 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 80,
"sampled": 80
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 87,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"poetry.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [
"Makefile",
"mise.toml"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.08,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.2
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, mise.toml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, mise.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".pylintrc",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".pylintrc"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "8 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 8,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "20 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 20,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 52634,
"source_files_sampled": 107,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/107 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 107,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library",
"application"
],
"labels": [
"library",
"network-service",
"cli"
],
"scores": {
"cli": 4,
"library": 6,
"network-service": 4
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:pypi",
"weight": 6
},
{
"tier": "dependencies",
"label": "network-service",
"source": "dep:fastapi",
"weight": 4
},
{
"tier": "description",
"label": "cli",
"source": "description:cli",
"weight": 2
},
{
"tier": "tags",
"label": "cli",
"source": "tag:cli",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-31T00:30:52.739703Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sebastienrousseau/bankstatementparser.svg",
"full_name": "sebastienrousseau/bankstatementparser",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з sebastienrousseau/bankstatementparser. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v2.5.0, схема v0.27.0 — повна методологія · вікі метрик.
